How to set Authentication Methods in IIS programmatically

Question

We are working on automating the deployment of some IIS applications. I've used cscript.exe inside a windows batch file to create the web app and such. There are however a few settings currently done by hand that I need to automate. Namely, if you look at the properties of an app, under Directory Structure -> Authentication and access control -> Edit, I need to uncheck Enable anonymous access and check Integrated Windows authentication.

Is there an easy way to do this from a windows batch file?

EDIT: I should clarify this is IIS 6.0, so appcmd is not available.

You might look into using Windows PowerShell for this type of task in the future. Although the syntax is clunky, it allows access to .NET classes, etc and is significantly more powerful than vbscript or batch files. — 3Dave
– 3Dave, Commented Dec 7, 2009 at 18:56
What exactly do you do in the script you run by cscript.exe. Do you create the site in this script? Or do you use IIsWeb.vbs in the batch file? — Kev
– Kev, Commented Dec 9, 2009 at 0:19
I basically copy the web site tree under Inetpub/wwwroot and then use: "" cscript.exe %systemroot%\system32\iisweb.vbs /create c:\inetpub\wwwroot "%1" /b %2 "" where %1 and %2 are some vars for the app name. If I then go into IIS Manager, under Web Sites, I can see the site and its identifier (under the Default Web Site and Sharepoint Admin) — Brett McCann
– Brett McCann, Commented Dec 9, 2009 at 13:56

user226593 · Accepted Answer · 2009-12-07 18:52:41Z

2

hope this helpes:

http://forums.iis.net/t/1159665.aspx

answered Dec 7, 2009 at 18:52

user226593

272 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Brett McCann Over a year ago

I guess I would ask the same question I asked of Kev. This command from the link works as advertised: adsutil.vbs set w3svc/1/root/Authflags 4 However I want to run this command as part of the installation of a new app. The app as installed currently has an Identifier of 208223887, so I would want: adsutil.vbs set w3svc/208223887/root/Authflags 4 but I don't know that value until the app is installed. Is there any way to get this as a variable after the install step so I can substitute it into this command further down in my script?

Community · Accepted Answer · 2017-05-23 10:33:02Z

1

I answered a very similar question a wee while back. The example uses the asdutil.vbs tool which you can call from your batch file:

Setting NTAuthenticationProviders at an Application level in IIS 6 (Stack Overflow)

Updated:

Because you've already got a CScript script to create the website, you can just set the AuthFlags in the script:

'' Some values just as an example
iisNumber = 668
ipAddress = "172.16.3.200"
hostName = "myserver.com"
wwwfolder = "c:\mysites\www"


Dim serverBindings(1)
serverBindings(0) = ipAddress & ":80:www." & hostName
serverBindings(1) = ipAddress & ":80:" & hostName


'' Create server
Set w3svc = GetObject("IIS://localhost/w3svc")
Set newWebServer = w3svc.Create("IIsWebServer", iisNumber)
newWebServer.ServerBindings = serverBindings
newWebServer.ServerComment = "Server is: " & hostName
newWebServer.SetInfo

'' Create /root app
Set rootApp = newWebServer.Create("IIsWebVirtualDir", "ROOT")
rootApp.Path = wwwFolder
rootApp.AccessRead = true
rootApp.AccessScript = true
rootApp.AppCreate(True)
rootApp.AuthFlags = 4 '' <== Set AuthFlags here
rootApp.SetInfo

edited May 23, 2017 at 10:33

CommunityBot

11 silver badge

answered Dec 8, 2009 at 14:20

Kev

120k53 gold badges308 silver badges396 bronze badges

1 Comment

Brett McCann Over a year ago

Very useful, but one question, the script you provided works on the defaults web app (1) as you pointed out. How do I know from a programmatic standpoint, the Application ID, for an app other than the default app? I know its name, but windows generates the ID.

Remus Rusanu · Accepted Answer · 2009-12-09 00:05:12Z

1

See Configure Windows Authentication (IIS 7):

appcmd set config /section:windowsAuthentication /enabled:true | false

For IIS 6 probably WMI is the alternative:

edited Dec 9, 2009 at 0:05

answered Dec 7, 2009 at 18:53

Remus Rusanu

296k42 gold badges459 silver badges583 bronze badges

Comments

Nathan Rice · Accepted Answer · 2012-01-20 07:57:48Z

0

Dim sSitePath = "1" 'Set the site ID here
Set oSite =  GetObject("IIS://localhost/" & sSitePath & "/root")

Select Case oSite.AuthFlags
  Case 1
    Wscript.Echo "Anonymous"
  Case 2
    Wscript.Echo "Basic"
  Case 4
    Wscript.Echo "NTLM"
  Case 6
    Wscript.Echo "MD5"
  Case 64
    Wscript.Echo "Passport"
End Select

answered Jan 20, 2012 at 7:57

Nathan Rice

3,1211 gold badge22 silver badges30 bronze badges

Collectives™ on Stack Overflow

How to set Authentication Methods in IIS programmatically

4 Answers 4

1 Comment

1 Comment

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

4 Answers 4

1 Comment

1 Comment

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related