Back Up and Restore the IIS Metabase

Applies To: Windows Server 2003, Windows Server 2003 with SP1

Metabase backup files are copies of the metabase configuration file (MetaBase.xml) and the matching metabase schema file (MBSchema.xml). The metabase can be restored from the backup files by using the metabase configuration backup and restore feature. You can create backup files by using IIS Manager or the command-line script iisback.vbs, which is stored in systemroot\System32.

The administrator can create a portable backup by providing a password that is used by IIS to encrypt the secure metabase properties in the backup files. Encrypting the secure properties in this way allows the backup files to be restored to another computer by using the password. Once a backup is created, the password within the backup file cannot be changed.

When creating a non-portable backup, the administrator does not provide a password. Instead, the machine key is used to encrypt secure metabase properties. Because a machine key is unique to the computer it belongs to, a backup created this way can only be restored to the original computer.

Requirements

  • Credentials: Membership in the Administrators group on the local computer.

  • Tools: Iis.msc, Iisback.vbs

Recommendation

As a security best practice, log on to your computer using an account that is not in the Administrators group, and then use the Run as command to run IIS Manager as an administrator. At the command prompt, type **runas /user:**administrative_accountname mmc %systemroot%\system32\inetsrv\iis.msc.

Procedures

To create a portable backup (password required)

  1. In IIS Manager, right-click the local computer, click All Tasks, and then click Backup/Restore Configuration.

  2. Click Create Backup.

  3. In the Configuration backup name box, type a name for the backup file.

  4. Select the Encrypt backup using password check box, type a password into the Password box, and then type the same password in the Confirm password box.

  5. Click OK, and then click Close.

    The IIS metabase is created in the systemroot**\system32\inetsrv\MetaBack** folder.

To create a non-portable backup (password not required)

  1. In IIS Manager, right-click the local computer, click All Tasks, and click Backup/Restore Configuration.

  2. Click Create Backup.

  3. In the Configuration backup name box, type a name for the backup file.

  4. Click OK, and then click Close.

    The IIS metabase is created in the systemroot**\system32\inetsrv\MetaBack** folder.

To restore the metabase backup

  1. In IIS Manager, right-click the local computer, click All Tasks, and click Backup/Restore Configuration.

  2. In the Backups list box, click the version of the Automatic Backup file that you want to restore, and click Restore. If prompted for a password, type the password you chose to secure the backup.

    The IIS metabase is restored to the location from which it was backed up.