Iisext.vbs: IIS Web service extension script

  • Article

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Iisext.vbs: IIS Web service extension script

Configures and manages Web service extensions, applications, and individual files on servers running Windows Server 2003 with Internet Information Services (IIS) 6.0. Administrators can use this script to enable and list applications; add and remove application dependencies; enable, disable, and list Web service extensions; and add, remove, enable, disable, and list individual files.

To view the command syntax, click a command:

iisext /enapp

iisext /listapp

iisext /adddep, /remdep

iisext /enext, /disext

iisext /listext

iisext /addfile

iisext /enfile, /disfile, /rmfile

iisext /listfile

iisext /enapp

Enables a specific application in the ApplicationDependencies metabase property.

Syntax

iisext[.vbs] /enapp Application [/s Computer [/u [Domain**\]User [/p** Password]]]

Parameters
  • Application
    Required. Specifies the name of the application to be enabled.
  • /s Computer
    Runs the script on the specified remote computer. Type the computer name or IP address without backslashes. By default, the script runs on the local computer.
  • /u [Domain\]User
    Runs the script with the permissions of the specified user account. This account must be a member of the Administrators group on the remote computer. By default, the script runs with the permissions of the current user of the local computer.
  • /p Password
    Specifies the password of the user account specified in the /u parameter. If you omit this parameter, the script prompts you for the password and obscures the text you type.
Remarks

  • To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.

  • This operation applies to entries in the ApplicationDependencies metabase property and is used to manage the Web service extensions an application depends upon. A Web service extension is any combination of CGI or ISAPI files that extend IIS functionality.

  • An application must have at least one preexisting dependency in the ApplicationDependencies metabase property in order to be enabled.

Examples

The following examples show how to use iisext /enapp in specific situations.

To enable an application on a local computer

The following command enables the application "Payroll" on the local computer:

iisext /enapp Payroll

In response, iisext displays the following:

Connecting to server ...Done.
Enabling application complete.

To enable an application on a remote computer

The following command enables the application "TravelPlans" on a remote computer:

iisext /enapp TravelPlans /s RemoteComputer /u Manager /p Pa$$Werd

In response, iisext displays the following:

Connecting to server ...Done.
Enabling application complete.

iisext /listapp

Lists applications in the ApplicationDependencies metabase property.

Syntax

iisext[.vbs] /listapp [/s Computer [/u [Domain**\]User [/p** Password]]]

Parameters
  • /s Computer
    Runs the script on the specified remote computer. Type the computer name or IP address without backslashes. By default, the script runs on the local computer.
  • /u [Domain\]User
    Runs the script with the permissions of the specified user account. This account must be a member of the Administrators group on the remote computer. By default, the script runs with the permissions of the current user of the local computer.
  • /p Password
    Specifies the password of the user account specified in the /u parameter. If you omit this parameter, the script prompts you for the password and obscures the text you type.
Remarks

  • To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.

  • This operation applies to entries in the ApplicationDependencies metabase property and is used to manage the Web service extensions an application depends upon. A Web service extension is any combination of CGI or ISAPI files that extend IIS functionality.

  • An application must have at least one preexisting dependency in the ApplicationDependencies metabase property in order to be listed.

Examples

The following examples show how to use iisext /listapp in specific situations.

To list applications in the ApplicationDependencies property on a local computer

The following command lists all of the applications that are in the ApplicationDependencies list of the metabase on the local computer:

iisext /listapp

In response, iisext displays all of the applications accessible from ApplicationDependencies on the local computer.

Connecting to server ...Done
Active Server Pages
Internet Data Connector
Server Side Includes
WebDAV
Payroll
TravelPlans

To list applications in the ApplicationDependencies property on a remote computer

The following command displays all of the applications accessible from ApplicationDependencies on a remote computer.

iisext /listapp /s RemoteComputer /u Manager /p Pa$$Werd

In response, iisext displays all of the applications available on the remote computer.

Connecting to server ...Done
Active Server Pages
Internet Data Connector
Server Side Includes
WebDAV
Payroll
TravelPlans

iisext /adddep, /remdep

Adds or removes a dependency between an application and one or more Web service extensions.

Syntax

iisext[.vbs] {/addep | /rmdep} ApplicationID [ID...] [/s Computer [/u [Domain**\]User [/p** Password]]]

Parameters
  • Application
    Required. Specifies the name of the application that is dependent on one or more Web service extensions.
  • ID
    Required. Specifies the ID of the Web service extension upon which the application is dependent. Additional dependencies are optional.
  • /s Computer
    Runs the script on the specified remote computer. Type the computer name or IP address without backslashes. By default, the script runs on the local computer.
  • /u [Domain\]User
    Runs the script with the permissions of the specified user account. This account must be a member of the Administrators group on the remote computer. By default, the script runs with the permissions of the current user of the local computer.
  • /p Password
    Specifies the password of the user account specified in the /u parameter. If you omit this parameter, the script prompts you for the password and obscures the text you type.
Remarks

  • To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.

  • This operation applies to entries in the ApplicationDependencies metabase property and is used to manage the Web service extensions an application depends upon. A Web service extension is any combination of CGI or ISAPI files that extend IIS functionality.

  • If the application does not exist in the ApplicationDependencies property, iisext will create it.

Examples

The following examples show how to use iisext /adddep, /rmdep in specific situations.

To add application dependencies on a local computer

The following command makes the application "Payroll" dependent on the Web service extension "timesheet" on the local computer. In this example, the files that are required for the Web service extension "timesheet" were previously added to and enabled on the local computer.

iisext /adddep Payroll timesheet

In response, iisext displays the following:

Connecting to server ...Done.
Adding dependency complete.

To remove multiple application dependencies from an application on a remote computer

The following command removes the dependency of the application "TravelPlans" on the Web service extensions "FlightSchedules" and "HotelRooms" on a remote computer:

iisext /rmdep TravelPlans FlightSchedules HotelRooms /s RemoteComputer /u Manager /p Pa$$Werd

In response, iisext displays the following:

Connecting to server ...Done.
Removing dependency complete.

iisext /enext, /disext

Enables or disables a Web service extension with a specific Web service extension ID.

Syntax

iisext[.vbs] {/enext | /disext} ID [/s Computer [/u [Domain**\]User [/p** Password]]]

Parameters
  • ID
    Required. Specifies the ID of the Web service extension to be enabled or disabled.
  • /s Computer
    Runs the script on the specified remote computer. Type the computer name or IP address without backslashes. By default, the script runs on the local computer.
  • /u [Domain\]User
    Runs the script with the permissions of the specified user account. This account must be a member of the Administrators group on the remote computer. By default, the script runs with the permissions of the current user of the local computer.
  • /p Password
    Specifies the password of the user account specified in the /u parameter. If you omit this parameter, the script prompts you for the password and obscures the text you type.
Remarks

  • To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.

  • This operation applies to groups of entries that have the same Web service ID in WebSvcExtRestrictionList property of the metabase. The operation sets the Access flag to 1 (Allow) or 0 (Deny) on each of the ISAPIRestrictions or CGIRestrictions properties for that ID.

  • A Web service extension is any combination of CGI or ISAPI files that extend IIS functionality.

  • This operation can only be performed on one Web service extension at a time.

Examples

The following examples show how to use iisext /enext, /disext in specific situations.

To enable a Web service extension on a local computer

The following command enables the Web service extension "Payroll" on the local computer:

iisext /enext Payroll

In response, iisext displays the following:

Connecting to server ...Done.
Enabling extension complete.

To disable a Web service extension on a remote computer

The following command disables the Web service extension "PassengerList" on a remote computer:

iisext /disext PassengerList /s RemoteComputer /u Manager /p Pa$$Werd

In response, iisext displays the following:

Connecting to server ...Done.
Disabling extension complete.

iisext /listext

Lists Web service extension IDs for all defined Web service extensions. If there are multiple entries with the same ID, the Web service extension is only listed once.

Syntax

iisext[.vbs] /listext [/s Computer [/u [Domain**\]User [/p** Password]]]

Parameters
  • /s Computer
    Runs the script on the specified remote computer. Type the computer name or IP address without backslashes. By default, the script runs on the local computer.
  • /u [Domain\]User
    Runs the script with the permissions of the specified user account. This account must be a member of the Administrators group on the remote computer. By default, the script runs with the permissions of the current user of the local computer.
  • /p Password
    Specifies the password of the user account specified in the /u parameter. If you omit this parameter, the script prompts you for the password and obscures the text you type.
Remarks

  • To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.

  • This operation applies to entries in the WebSvcExtRestrictionList metabase property and is used to manage the Web service extensions an application depends upon. A Web service extension is any combination of CGI or ISAPI files that extend IIS functionality.

Examples

The following examples show how to use iisext /listext in specific situations.

To list Web service extension IDs in the WebSvcExtRestrictionList property on a local computer

The following command lists all of the Web service extension IDs that are in the WebSvcExtRestrictionList property of the metabase on the local computer:

iisext /listext

In response, iisext displays all of the Web service extension IDs that are on the local computer.

Connecting to server ...Done
SSINC
Payroll
ASP
Inventory
ASP.NET
WEBDAV
HTTPODBC

To list Web service extension IDs in the WebSvcExtRestrictionList property on a remote computer

The following command lists all of the Web service extension IDs that are in the WebSvcExtRestrictionList property of the metabase on a remote computer:

iisext /listext /s RemoteComputer /u Manager /p Pa$$Werd

In response, iisext displays all of the Web service extension IDs that are on the remote computer.

Connecting to server ...Done
Payroll
Inventory
ASP.NET
WEBDAV

iisext /addfile

Adds a single file to the Web service extension restriction list (WebSvcExtRestrictionList) property in the metabase.

Syntax

iisext[.vbs] /addfile Path**\FileName Access {0 | 1} ID Deletable {0 | 1} ShortDesc [/s** Computer [/u [Domain**\]User [/p** Password]]]

Parameters
  • Path \ FileName
    Required. Specifies the file name and path of the Web service extension entry to be added.
  • Access {0 | 1}
    Required. Numeric designation of whether the file is disabled (0) or enabled(1) after it is added.
  • ID
    Required. Specifies the ID of the Web service extension associated with the file. If the ID does not exist, iisext will create it.
  • Deletable {0 | 1}
    Required. Numeric designation of whether the entry can be deleted from the Web service extension restriction list using iisext or IIS Manager. Set to 0 to prevent the entry from being deleted or 1 to allow it to be deleted.
  • ShortDesc
    Required. A short description of the Web service extension associated with the entry. This text can be localized and should be the same for all entries associated with the same Web service extension.
  • /s Computer
    Runs the script on the specified remote computer. Type the computer name or IP address without backslashes. By default, the script runs on the local computer.
  • /u [Domain\]User
    Runs the script with the permissions of the specified user account. This account must be a member of the Administrators group on the remote computer. By default, the script runs with the permissions of the current user of the local computer.
  • /p Password
    Specifies the password of the user account specified in the /u parameter. If you omit this parameter, the script prompts you for the password and obscures the text you type.
  • /addfile /?
    Displays help at the command prompt.
Remarks

  • To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.

  • This operation applies to entries in the WebSvcExtRestrictionList metabase property and is used to manage the Web service extensions an application depends upon. A Web service extension is any combination of CGI or ISAPI files that extend IIS functionality.

  • Path\FileName can include special cases such as *.dll to enable/didisablenlisted ISAPI files and *.exe to enable/disable unlisted CGI files.

Examples

The following examples show how to use iisext /addfile in specific situations.

To add a Web service extension file as an entry in the WebSvcExtRestrictionList on the local computer

The following command adds the file Timesheet.exe as an entry in the Web service extension restriction list (WebSvcExtRestrictionList) on the local computer. The Access flag is set to 0 to disable the entry on startup, The ID identifies the associated Web service extension as Payroll, and the Deletable flag is set to 1 to allow the entry to be deleted from the Web service extension restriction list if necessary.

iisext /AddFile c:\Source\Timesheet.exe 0 Payroll 1 Payroll

In response, iisext displays the following.

Connecting to server ...Done.
Adding extension file complete.

To add a Web service extension file as an entry in the WebSvcExtRestrictionList on a remote computer

The following command adds the file Payscale.dll as an entry in the Web service extension restriction list (WebSvcExtRestrictionList) on a remote computer. The Access flag is set to 1 to enable the entry on startup, The ID identifies the associated Web service extension as Payroll, and the Deletable flag is set to 0 to prevent the entry from being deleted from the Web service extension restriction list.

iisext /AddFile c:\Source\Payscale.dll 1 Payroll 0 Payroll /s RemoteComputer /u Manager /p Pa$$Werd

In response, iisext displays the following.

Connecting to server ...Done.
Adding extension file complete.

iisext /enfile, /disfile, /rmfile

Enables, disables, or removes a specific Web service extension file in the Web service extension restriction list (WebSvcExtRestrictionList) property.

Syntax

iisext[.vbs] {/enfile | /disfile | /rmfile} [Path**\]FileName [/s** Computer [/u [Domain**\]User [/p** Password]]]

Parameters
  • [ Path\]FileName
    Required. Specifies the file to be enabled, disabled, or removed.
  • /s Computer
    Runs the script on the specified remote computer. Type the computer name or IP address without backslashes. By default, the script runs on the local computer.
  • /u [Domain\]User
    Runs the script with the permissions of the specified user account. This account must be a member of the Administrators group on the remote computer. By default, the script runs with the permissions of the current user of the local computer.
  • /p Password
    Specifies the password of the user account specified in the /u parameter. If you omit this parameter, the script prompts you for the password and obscures the text you type.
Remarks

  • To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.

  • This operation applies to entries in WebSvcExtRestrictionList property of the metabase. The operation sets the Access flag to 1 (Allow) or 0 (Deny) on each of the ISAPIRestrictions or CGIRestrictions properties for that file entry.

  • If a \rmfile operation is performed on a file flagged as not deletable, iisext returns an error.

  • A Web service extension is any combination of CGI or ISAPI files that extend IIS functionality.

  • This operation can only be performed on one Web service extension file at a time.

Examples

The following examples show how to use iisext /enfile, /disfile, or /rmfile in specific situations.

To enable a Web service extension file on a local computer

The following command enables the file "Timesheet.exe" in the WebSvcExtRestrictionList property of the metabase on the local computer:

iisext /enfile c:\Source\Timesheet.exe

In response, iisext displays the following:

Connecting to server ...Done.
Enabling extension file complete.

To disable a Web service extension file on a remote computer

The following command disables the file "Taxes.dll" in the WebSvcExtRestrictionList property of the metabase on a remote computer:

iisext /disfile c:\Source\Taxes.dll /s RemoteComputer /u Manager /p Pa$$Werd

In response, iisext displays the following:

Connecting to server ...Done.
Disabling extension file complete.

To remove a Web service extension file on a remote computer

The following command removes the file "HourlyRate.dll" in the WebSvcExtRestrictionList property of the metabase on a remote computer:

iisext /rmfile c:\Source\HourlyRate.dll /s RemoteComputer /u Manager /p Pa$$Werd

In response, iisext displays the following:

Connecting to server ...Done.
Removing extension file complete.

iisext /listfile

Lists Web service extension files for all defined Web service extensions.

Syntax

iisext[.vbs] /listfile [/s Computer [/u [Domain**\]User [/p** Password]]]

Parameters
  • /s Computer
    Runs the script on the specified remote computer. Type the computer name or IP address without backslashes. By default, the script runs on the local computer.
  • /u [Domain\]User
    Runs the script with the permissions of the specified user account. This account must be a member of the Administrators group on the remote computer. By default, the script runs with the permissions of the current user of the local computer.
  • /p Password
    Specifies the password of the user account specified in the /u parameter. If you omit this parameter, the script prompts you for the password and obscures the text you type.
Remarks

  • To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.

  • This operation applies to entries in the WebSvcExtRestrictionList metabase property and is used to manage the Web service extensions an application depends upon. A Web service extension is any combination of CGI or ISAPI files that extend IIS functionality.

Examples

The following examples show how to use iisext /listfile in specific situations.

To list Web service extension files in the WebSvcExtRestrictionList property on a local computer

The following command lists all of the Web service extension files that are in the WebSvcExtRestrictionList property of the metabase on the local computer:

iisext /ListFile

In response, iisext displays all of the Web service extension files that are on the local computer.

Connecting to server ...Done
E:\Windows\system32\inetsrv\asp.dll
E:\Windows\system32\inetsrv\httpodbc.dll
E:\Windows\system32\inetsrv\ssinc.dll
E:\Windows\system32\inetsrv\httpext.dll
E:\Windows\system32\Microsoft.NET\Framework\v1.0.3705\aspnet_isapi.dll
c:\Source\Taxes.dll
c:\Source\Accounting.dll
c:\Source\Taxes.exe
c:\Source\Timesheet.exe
c:\Source\Payscale.dll
Remarks

  • The /u and /p command-line options are available only when you use /s. You must use /p with /u to provide the user's password.

  • Iisext.vbs performs the same operations that are available from IIS Manager. You can use either tool to administer IIS Web sites.

  • The computer issuing the command must be running Windows XP or a Windows Server 2003 operating system. The user must be a member of the Administrators group on any computer that the command affects.

  • The computer that the command affects must be a server running Windows Server 2003 with Internet Information Services (IIS) 6.0.

Formatting legend

Format Meaning

Italic

Information that the user must supply

Bold

Elements that the user must type exactly as shown

Ellipsis (...)

Parameter that can be repeated several times in a command line

Between brackets ([])

Optional items

Between braces ({}); choices separated by pipe (|). Example: {even|odd}

Set of choices from which the user must choose only one

Courier font

Code or program output

See Also

Concepts

Iisback.vbs: IIS backup management script
Iiscnfg.vbs: IIS configuration script
Iisftp.vbs: IIS FTP site management script
IISFtpdr.vbs: IIS FTP directory script
Iisvdir.vbs: IIS virtual directory script
Iisweb.vbs: IIS Web site management script
Command-line reference A-Z
Command shell overview