Appendix C: IIS Settings for Web Services
Applies To: Windows Server 2003 with SP2, Windows Server Update Services
Troubleshooting WSUS Web services may be simplified if you compare your current IIS settings for the different WSUS Web services with the ones given below, which are the ones set by WSUS setup. A service may have stopped working correctly because one of these settings was changed by another installation or application.
The values of these IIS settings are sometimes represented with variable names instead of actual values. This is because the actual value may vary from one installation to another.
The variable names used in the settings, and in the instructions below, are:
windir-: The standard environment variable for the Windows directory (on Windows Server 2003, usually C:\WINDOWS).
InetpubDir-: The IIS inetpub directory on Windows Server 2003 (usually C:\Inetpub).
WSUSInstallDir-: The directory where WSUS is installed (usually C:\Program Files\Update Services).
WebSiteID-: The number IIS uses to identify Web sites (1 is the ID of the default Web site, but other Web sites are assigned random numbers).
IIS vroots
The following virtual directories (vroots) are created in IIS (in the Default Web Site by default) for client-to-server synchronization, server to server synchronization, reporting, and client self-update.
| Vroot in IIS | Properties |
|---|---|
ClientWebService |
Directory: %ProgramFiles%Update Services\WebServices\ClientWebService Application Pool: WsusPool Security: Anonymous Access Enabled Execute Permissions: Scripts Only |
Content |
Directory[the location of the WSUS content directory] Security: Anonymous Access Enabled Execute Permissions: None |
DssAuthWebService |
Directory: %ProgramFiles%Update Services\WebServices\DssAuthWebService Application Pool: WsusPool Security: Anonymous Access Enabled Execute Permissions: Scripts Only |
Inventory |
Directory: %ProgramFiles%Update Services\ Inventory Application Pool: WsusPool Security: Anonymous Access Enabled Execute Permissions: Scripts Only |
ReportingWebService |
Directory: %ProgramFiles%Update Services\WebServices\ReportingWebService Application Pool: WsusPool Security: Anonymous Access Enabled Execute Permissions: Scripts Only |
ServerSyncWebService |
Directory: %ProgramFiles%Update Services\WebServices\ServerSyncWebService Application Pool: WsusPool Security: Anonymous Access Enabled Execute Permissions: Scripts Only |
SimpleAuthWebService |
Directory: %ProgramFiles%Update Services\WebServices\SimpleAuthWebService Application Pool: WsusPool Security: Anonymous Access Enabled Execute Permissions: Scripts Only |
ApiRemoting30 |
Directory: %ProgramFiles%Update Services\Administration Application Pool: WsusPool Security: Integrated Windows Authentication, Digest Authentication Execute Permissions: Scripts Only |
SelfUpdate |
Directory: %ProgramFiles%Update Services\SelfUpdate Security: Anonymous Access Enabled Execute Permissions: Scripts Only |
Using the adsutil IIS utility
The adsutil IIS utility can be found on your server in the InetpubDir\AdminScripts directory. Information about how to use this utility can be found at one of the following locations:
If product documentation is installed on your local computer, in the localhost directory at https://localhost/iishelp/iis/htm/adminsamples/adsutil.htm.
Otherwise, in the online documentation (https://go.microsoft.com/fwlink/?LinkID=77230).
Finding Web service paths with adsutil
You can use adsutil to find the paths for different Web services on your computer with the following procedure.
To find the paths of Web services
Open a command window.
Navigate to the directory where adsutil is located: cd %Inetpubdir%\AdminScripts
Type the following command: adsutil.vbs find path
If you have WSUS installed, you should see output like the following:
Property path found at:
W3SVC/WebSiteID/ROOT
W3SVC/WebSiteID/ROOT/ApiRemoting30
W3SVC/WebSiteID/D/ROOT/ClientWebService
W3SVC/WebSiteID/ROOT/Content
W3SVC/WebSiteID/ROOT/DssAuthWebService
W3SVC/WebSiteID/ROOT/Inventory
W3SVC/WebSiteID/ROOT/ReportingWebService
W3SVC/WebSiteID/ROOT/Selfupdate
W3SVC/WebSiteID/ROOT/ServerSyncWebService
W3SVC/WebSiteID/ROOT/SimpleAuthWebService
Note
If you have installed WSUS on the default Web site, WebSiteID will be 1, but if you have installed it on another Web site, WebSiteID will be a random number.
Checking the properties of a Web service
You can also use adsutil to find the properties of a given Web service. You will use one of the Web service paths listed above to specify the Web service you want to check. For example, if you want to check the properties of the Reporting Web service, you use the path W3SVC/WebSiteID/ROOT/ReportingWebService, where WebSiteID stands for the number of the WSUS Web site.
To check the properties of a Web service
Open a command window.
Navigate to the directory where adsutil is located: cd Inetpubdir**\AdminScripts**
Type the following command: adsutil.vbs enum WebServicePath where WebServicePath stands for the path of the Web service you want to check.
Compare the output to the standard values given in the sections below.
Global properties
These global properties can be retrieved with the following adsutil command:
adsutil.vbs enum W3SVC
The properties listed below are a partial list.
| Property | Value |
|---|---|
KeyType |
(STRING) "IIsWebService" |
MaxConnections |
(INTEGER) 4294967295 |
AnonymousUserName |
(STRING) "IUSR_<machinename>" |
ConnectionTimeout |
(INTEGER) 120 |
AllowKeepAlive |
(BOOLEAN) True |
DefaultDoc |
(STRING) "Default.htm,Default.asp,index.htm" |
CacheISAPI |
(BOOLEAN) True |
CGITimeout |
(INTEGER) 300 |
ContentIndexed |
(BOOLEAN) True |
DownlevelAdminInstance |
(INTEGER) 1 |
AspBufferingOn |
(BOOLEAN) True |
AspLogErrorRequests |
(BOOLEAN) True |
AspScriptErrorSentToBrowser |
(BOOLEAN) True |
AspScriptErrorMessage |
(STRING) "An error occurred on the server when processing the URL. Please contact the system administrator" |
AspAllowOutOfProcComponents |
(BOOLEAN) True > |
AspScriptFileCacheSize |
(INTEGER) 500 |
AspDiskTemplateCacheDirectory |
(EXPANDSZ) "%windir%\system32\inetsrv\ASP Compiled Templates" |
AspMaxDiskTemplateCacheFiles |
(INTEGER) 2000 |
AspScriptEngineCacheMax |
(INTEGER) 250 |
AspScriptTimeout |
(INTEGER) 90 |
AspSessionTimeout |
(INTEGER) 20 |
AspEnableParentPaths |
(BOOLEAN) False |
AspAllowSessionState |
(BOOLEAN) True |
AspScriptLanguage |
(STRING) "VBScript" |
AspExceptionCatchEnable |
(BOOLEAN) True<br> |
AspCodepage |
(INTEGER) 0 |
AspLCID |
(INTEGER) 2048 |
AspQueueTimeout |
(INTEGER) 4294967295 |
AspEnableAspHtmlFallback |
(BOOLEAN) False |
AspEnableChunkedEncoding |
(BOOLEAN) True |
AspEnableTypelibCache |
(BOOLEAN) True |
AspErrorsToNTLog |
(BOOLEAN) False |
AspProcessorThreadMax |
(INTEGER) 25 |
AspTrackThreadingModel |
(BOOLEAN) False |
AspRequestQueueMax |
(INTEGER) 3000 |
AspEnableApplicationRestart |
(BOOLEAN) True |
AspQueueConnectionTestTime |
(INTEGER) 3 |
AspSessionMax |
(INTEGER) 4294967295 |
AppAllowDebugging |
(BOOLEAN) False |
AppAllowClientDebug |
(BOOLEAN) False |
PasswordChangeFlags |
(INTEGER) 6 |
AuthChangeUnsecure |
(BOOLEAN) False |
AuthChangeDisable |
(BOOLEAN) True |
AuthAdvNotifyDisable |
(BOOLEAN) True |
DirBrowseFlags |
(INTEGER) 1073741886 |
EnableDirBrowsing |
(BOOLEAN) False |
DirBrowseShowDate |
(BOOLEAN) True |
DirBrowseShowTime |
(BOOLEAN) True |
DirBrowseShowSize |
(BOOLEAN) True |
DirBrowseShowExtension |
(BOOLEAN) True |
DirBrowseShowLongDate |
(BOOLEAN) True |
EnableDefaultDoc |
(BOOLEAN) True |
AuthFlags |
(INTEGER) 1 |
AuthBasic |
(BOOLEAN) False |
AuthAnonymous |
(BOOLEAN) True |
AuthNTLM |
(BOOLEAN) False |
AuthMD5 |
(BOOLEAN) False |
AuthPassport |
(BOOLEAN) False |
InProcessIsapiApps |
(LIST) (6 Items) "%windir%\system32\inetsrv\httpext.dll" "%windir%\system32\inetsrv\httpodbc.dll" "%windir%\system32\inetsrv\ssinc.dll" "%windir%\system32\msw3prt.dll" "%windir%\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll" |
LogOdbcDataSource |
(STRING) "HTTPLOG"> |
LogOdbcTableName |
(STRING) "InternetLog" |
LogOdbcUserName |
(STRING) "InternetAdmin" |
WAMUserName |
(STRING) "IWAM_<machinename>"> |
AuthChangeURL |
(STRING) "/iisadmpwd/achg.asp" |
AuthExpiredURL |
(STRING) "/iisadmpwd/aexp.asp" |
AuthNotifyPwdExpURL |
(STRING) "/iisadmpwd/anot.asp" |
AuthExpiredUnsecureURL |
(STRING) "/iisadmpwd/aexp3.asp" |
AuthNotifyPwdExpUnsecureURL |
(STRING) "/iisadmpwd/anot3.asp" |
AppPoolId |
(STRING) "DefaultAppPool" |
IIs5IsolationModeEnabled |
(BOOLEAN) False |
MaxGlobalBandwidth |
(INTEGER) 4294967295 |
MinFileBytesPerSec |
(INTEGER) 240 |
LogInUTF8 |
(BOOLEAN) False |
AspAppServiceFlags |
(INTEGER) 0 |
AspEnableTracker |
(BOOLEAN) False |
AspEnableSxs |
(BOOLEAN) False |
AspUsePartition |
(BOOLEAN) False |
AspKeepSessionIDSecure |
(INTEGER) 0 |
AspExecuteInMTA |
(INTEGER) 0 |
CentralBinaryLoggingEnabled |
(BOOLEAN) False |
AspRunOnEndAnonymously |
(BOOLEAN) True |
AspBufferingLimit |
(INTEGER) 4194304 |
AspCalcLineNumber |
(BOOLEAN) True |
ApplicationDependencies |
(LIST) (6 Items) "Active Server Pages;ASP" "Internet Data Connector;HTTPODBC" "Server Side Includes;SSINC" "WebDAV;WEBDAV" "ASP.NET v1.1.4322;ASP.NET v1.1.4322" |
WebSvcExtRestrictionList |
(LIST) (8 Items) "0,*.dll" "0,*.exe"> "0,<windir>\system32\inetsrv\asp.dll,0,ASP,Active Server Pages"> "0,<windir>\system32\inetsrv\httpodbc.dll,0,HTTPODBC,Internet Data Connector" "0,<windir>\system32\inetsrv\ssinc.dll,0,SSINC,Server Side Includes" "0,<windir>\system32\inetsrv\httpext.dll,0,WEBDAV,WebDAV"> "1,<windir>\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll,0,ASP.NET v2.0.50727,ASP.NET v2.0.50727" |
AspMaxRequestEntityAllowed |
(INTEGER) 204800 |
[/w3svc/1] |
n/a |
[/w3svc/AppPools] |
n/a |
[/w3svc/Filters] |
n/a |
[/w3svc/Info] |
n/a |
Global Properties of the WWW Web site
These properties can be retrieved with the following adsutil command:
**adsutil.vbs enum W3SVC/**WebSiteID
The properties listed below comprise a partial list.
| Property | Value |
|---|---|
KeyType |
(STRING) "IIsWebServer" |
ServerState |
(INTEGER) 2 |
ServerComment |
(STRING) "Default Website" |
ServerSize |
(INTEGER) 1 |
ServerBindings |
(LIST) (1 Items) ":80:" (or 8530) |
SecureBindings |
(LIST) (1 Items) ":443:" (or 8531) |
ConnectionTimeout |
(INTEGER) 180 |
DefaultDoc |
(STRING) "Default.htm,Default.asp,index.htm,iisstart.htm" |
AspBufferingOn |
(BOOLEAN) False |
LogPluginClsid |
(STRING) "{FF160663-DE82-11CF-BC0A-00AA006111E0}" |
Win32Error |
(INTEGER) 0 |
AppPoolId |
(STRING) "DefaultAppPool" |
Properties of the API Remoting Web service
| Property | Value |
|---|---|
KeyType |
(STRING) "IIsWebVirtualDir" |
AppRoot |
(STRING) "/LM/W3SVC/WebSiteID/ROOT/ApiRemoting30" |
AppFriendlyName |
(STRING) "ApiRemoting30" |
AppIsolated |
(INTEGER) 2 |
Path |
(STRING) "<WSUSInstallDir>\WebServices\ApiRemoting30" |
AccessFlags |
(INTEGER) 513 |
AccessExecute |
(BOOLEAN) False |
AccessSource |
(BOOLEAN) False |
AccessRead |
(BOOLEAN) True |
AccessWrite |
(BOOLEAN) False |
AccessScript |
(BOOLEAN) True |
AccessNoRemoteExecute |
(BOOLEAN) False |
AccessNoRemoteRead |
(BOOLEAN) False |
AccessNoRemoteWrite |
(BOOLEAN) False |
AccessNoRemoteScript |
(BOOLEAN) False |
AccessNoPhysicalDir |
(BOOLEAN) False |
AspScriptErrorSentToBrowser |
(BOOLEAN) False |
AspEnableParentPaths |
(BOOLEAN) False |
AuthFlags |
(INTEGER) 21 |
AuthBasic |
(BOOLEAN) False |
AuthAnonymous |
(BOOLEAN) True |
AuthNTLM |
(BOOLEAN) True |
AuthMD5 |
(BOOLEAN) True |
AuthPassport |
(BOOLEAN) False |
AppPoolId |
(STRING) "WsusPool" |
Properties of the Client Web service
| Property | Value |
|---|---|
KeyType |
(STRING) "IIsWebVirtualDir" |
AppRoot |
(STRING) "/LM/W3SVC/WebSiteID/ROOT/ClientWebService" |
AppFriendlyName |
(STRING) "ClientWebService" |
AppIsolated |
(INTEGER) 2 |
Path |
(STRING) "<WSUSInstallDir>\WebServices\ClientWebService" |
AccessFlags |
(INTEGER) 513 |
AccessExecute |
(BOOLEAN) False |
AccessSource |
(BOOLEAN) False |
AccessRead |
(BOOLEAN) True |
AccessWrite |
(BOOLEAN) False |
AccessScript |
(BOOLEAN) True |
AccessNoRemoteExecute |
(BOOLEAN) False |
AccessNoRemoteRead |
(BOOLEAN) False |
AccessNoRemoteWrite |
(BOOLEAN) False |
AccessNoRemoteScript |
(BOOLEAN) False |
AccessNoPhysicalDir |
(BOOLEAN) False |
AspScriptErrorSentToBrowser |
(BOOLEAN) False |
AspEnableParentPaths |
(BOOLEAN) False |
AuthFlags |
(INTEGER) 1 |
AuthBasic |
(BOOLEAN) False |
AuthAnonymous |
(BOOLEAN) True |
AuthNTLM |
(BOOLEAN) False |
AuthMD5 |
(BOOLEAN) False |
AuthPassport |
(BOOLEAN) False |
AppPoolId |
(STRING) "WsusPool" |
Properties of the Downstream Server Authentication Web service
| Property | Value |
|---|---|
KeyType |
(STRING) "IIsWebVirtualDir" |
AppRoot |
(STRING) "/LM/W3SVC/WebSiteID/ROOT/DssAuthWebService" |
AppFriendlyName |
(STRING) " DssAuthWebService " |
AppIsolated |
(INTEGER) 2 |
Path |
(STRING) "<WSUSInstallDir>\WebServices\DssAuthWebService" |
AccessFlags |
(INTEGER) 513 |
AccessExecute |
(BOOLEAN) False |
AccessSource |
(BOOLEAN) False |
AccessRead |
(BOOLEAN) True |
AccessWrite |
(BOOLEAN) False |
AccessScript |
(BOOLEAN) True |
AccessNoRemoteExecute |
(BOOLEAN) False |
AccessNoRemoteRead |
(BOOLEAN) False |
AccessNoRemoteWrite |
(BOOLEAN) False |
AccessNoRemoteScript |
(BOOLEAN) False |
AccessNoPhysicalDir |
(BOOLEAN) False |
AspScriptErrorSentToBrowser |
(BOOLEAN) False |
AspEnableParentPaths |
(BOOLEAN) False |
AuthFlags |
(INTEGER) 1 |
AuthBasic |
(BOOLEAN) False |
AuthAnonymous |
(BOOLEAN) True |
AuthNTLM |
(BOOLEAN) False |
AuthMD5 |
(BOOLEAN) False |
AuthPassport |
(BOOLEAN) False |
AppPoolId |
(STRING) "WsusPool" |
Properties of the Inventory Collection Web service
| Property | Value |
|---|---|
KeyType |
(STRING) "IIsWebVirtualDir" |
AppRoot |
(STRING) "/LM/W3SVC/WebSiteID/ROOT/Inventory" |
AppFriendlyName |
(STRING) "Inventory" |
AppIsolated |
(INTEGER) 2 |
Path |
(STRING) "<WSUSInstallDir>\WebServices\Inventory" |
AccessFlags |
(INTEGER) 513 |
AccessExecute |
(BOOLEAN) False |
AccessSource |
(BOOLEAN) False |
AccessRead |
(BOOLEAN) True |
AccessWrite |
(BOOLEAN) False |
AccessScript |
(BOOLEAN) True |
AccessNoRemoteExecute |
(BOOLEAN) False |
AccessNoRemoteRead |
(BOOLEAN) False |
AccessNoRemoteWrite |
(BOOLEAN) False |
AccessNoRemoteScript |
(BOOLEAN) False |
AccessNoPhysicalDir |
(BOOLEAN) False |
AspScriptErrorSentToBrowser |
(BOOLEAN) False |
AspEnableParentPaths |
(BOOLEAN) False |
AuthFlags |
(INTEGER) 1 |
AuthBasic |
(BOOLEAN) False |
AuthAnonymous |
(BOOLEAN) True |
AuthNTLM |
(BOOLEAN) False |
AuthMD5 |
(BOOLEAN) False |
AuthPassport |
(BOOLEAN) False |
AppPoolId |
(STRING) "WsusPool" |
Checking the properties of the Reporting Web service
| Property | Value |
|---|---|
KeyType |
(STRING) "IIsWebVirtualDir" |
AppRoot |
(STRING) "/LM/W3SVC/WebSiteID/ROOT/ReportingWebService" |
AppFriendlyName |
(STRING) " ReportingWebService " |
AppIsolated |
(INTEGER) 2 |
Path |
(STRING) "<WSUSInstallDir>\WebServices\ReportingWebService" |
AccessFlags |
(INTEGER) 513 |
AccessExecute |
(BOOLEAN) False |
AccessSource |
(BOOLEAN) False |
AccessRead |
(BOOLEAN) True |
AccessWrite |
(BOOLEAN) False |
AccessScript |
(BOOLEAN) True |
AccessNoRemoteExecute |
(BOOLEAN) False |
AccessNoRemoteRead |
(BOOLEAN) False |
AccessNoRemoteWrite |
(BOOLEAN) False |
AccessNoRemoteScript |
(BOOLEAN) False |
AccessNoPhysicalDir |
(BOOLEAN) False |
AspScriptErrorSentToBrowser |
(BOOLEAN) False |
AspEnableParentPaths |
(BOOLEAN) False |
AuthFlags |
(INTEGER) 1 |
AuthBasic |
(BOOLEAN) False |
AuthAnonymous |
(BOOLEAN) True |
AuthNTLM |
(BOOLEAN) False |
AuthMD5 |
(BOOLEAN) False |
AuthPassport |
(BOOLEAN) False |
AppPoolId |
(STRING) "WsusPool" |
Properties of the Selfupdate Web service
| Property | Value |
|---|---|
KeyType |
(STRING) "IIsWebVirtualDir" |
Path |
(STRING) "<WSUSInstallDir>\WebServices\ServerSyncWebService" |
AccessFlags |
(INTEGER) 513 |
AccessExecute |
(BOOLEAN) False |
AccessSource |
(BOOLEAN) False |
AccessRead |
(BOOLEAN) True |
AccessWrite |
(BOOLEAN) False |
AccessScript |
(BOOLEAN) True |
AccessNoRemoteExecute |
(BOOLEAN) False |
AccessNoRemoteRead |
(BOOLEAN) False |
AccessNoRemoteWrite |
(BOOLEAN) False |
AccessNoRemoteScript |
(BOOLEAN) False |
AccessNoPhysicalDir |
(BOOLEAN) False |
Properties of the Server Synchronization Web service
| Property | Value |
|---|---|
KeyType |
(STRING) "IIsWebVirtualDir" |
AppRoot |
(STRING) "/LM/W3SVC/WebSiteID/ROOT/ServerSyncWebService" |
AppFriendlyName |
(STRING) " ServerSyncWebService " |
AppIsolated |
(INTEGER) 2 |
Path |
(STRING) "<WSUSInstallDir>\WebServices\ServerSyncWebService" |
AccessFlags |
(INTEGER) 513 |
AccessExecute |
(BOOLEAN) False |
AccessSource |
(BOOLEAN) False |
AccessRead |
(BOOLEAN) True |
AccessWrite |
(BOOLEAN) False |
AccessScript |
(BOOLEAN) True |
AccessNoRemoteExecute |
(BOOLEAN) False |
AccessNoRemoteRead |
(BOOLEAN) False |
AccessNoRemoteWrite |
(BOOLEAN) False |
AccessNoRemoteScript |
(BOOLEAN) False |
AccessNoPhysicalDir |
(BOOLEAN) False |
AspScriptErrorSentToBrowser |
(BOOLEAN) False |
AspEnableParentPaths |
(BOOLEAN) False |
AuthFlags |
(INTEGER) 1 |
AuthBasic |
(BOOLEAN) False |
AuthAnonymous |
(BOOLEAN) True |
AuthNTLM |
(BOOLEAN) False |
AuthMD5 |
(BOOLEAN) False |
AuthPassport |
(BOOLEAN) False |
AppPoolId |
(STRING) "WsusPool" |
Properties of the Simple Authorization Web service
| Property | Value |
|---|---|
KeyType |
(STRING) "IIsWebVirtualDir" |
AppRoot |
(STRING) "/LM/W3SVC/WebSiteID/ROOT/SimpleAuthWebService" |
AppFriendlyName |
(STRING) "SimpleAuthWebService" |
AppIsolated |
(INTEGER) 2 |
Path |
(STRING) "<WSUSInstallDir>\WebServices\SimpleAuthWebService" |
AccessFlags |
(INTEGER) 513 |
AccessExecute |
(BOOLEAN) False |
AccessSource |
(BOOLEAN) False |
AccessRead |
(BOOLEAN) True |
AccessWrite |
(BOOLEAN) False |
AccessScript |
(BOOLEAN) True |
AccessNoRemoteExecute |
(BOOLEAN) False |
AccessNoRemoteRead |
(BOOLEAN) False |
AccessNoRemoteWrite |
(BOOLEAN) False |
AccessNoRemoteScript |
(BOOLEAN) False |
AccessNoPhysicalDir |
(BOOLEAN) False |
AspScriptErrorSentToBrowser |
(BOOLEAN) False |
AspEnableParentPaths |
(BOOLEAN) False |
AuthFlags |
(INTEGER) 1 |
AuthBasic |
(BOOLEAN) False |
AuthAnonymous |
(BOOLEAN) True |
AuthNTLM |
(BOOLEAN) False |
AuthMD5 |
(BOOLEAN) False |
AuthPassport |
(BOOLEAN) False |
AppPoolId |
(STRING) "WsusPool" |