Edit an ISAPI or CGI Restriction (IIS 7)

Article
07/02/2012

Applies To: Windows 7, Windows Server 2008, Windows Server 2008 R2, Windows Vista

Edit an ISAPI or CGI restriction when you want to change the location or description of the .exe or .dll file, or the status of the restriction.

Note

Editing a configuration setting changes the setting at the local level and for any child levels that inherit the setting.

Prerequisites

For information about the levels at which you can perform this procedure, and the modules, handlers, and permissions that are required to perform this procedure, see ISAPI and CGI Restrictions Feature Requirements (IIS 7).

Exceptions to Feature Requirements

None

To edit an ISAPI or CGI restriction

You can perform this procedure by using the user interface (UI), by running Appcmd.exe commands in a command-line window, by editing configuration files directly, or by writing WMI scripts.

User Interface

To use the UI

Open IIS Manager and navigate to the level you want to configure. For information about opening IIS Manager, see Open IIS Manager (IIS 7). For information about navigating to locations in the UI, see Navigation in IIS Manager (IIS 7).
In Features View, double-click ISAPI and CGI Restrictions.
Select a restriction from the list, and then click Edit in the Actions pane.
Optionally, in the Edit ISAPI or CGI Restriction dialog box, type the new path of the .dll or .exe file in the ISAPI or CGI path text box, or click the browse button (…) to navigate to the location of the file.
Optionally, in the Description text box, type a new description of the restriction.
Optionally, check Allow extension path of execute to allow the CGI or ISAPI program to run. If you do not check this option, the restriction status is Not Allowed, which is the default. You can change the restriction status later by selecting the restriction and clicking Allow or Deny in the Actions pane.
Click OK.

Command Line

To change an ISAPI or CGI restriction, use the following syntax:

appcmd set config /section:isapiCgiRestriction **/[path='string',description='string',allowed='True | False'].path | description | allowed:**string

The variable .path | description | allowed string is any single attribute you want to change followed by the new value. For example, to disable an ISAPI restriction named test.dll, type the following at the command prompt, and then press ENTER:

appcmd set config /section:isapiCgiRestriction /[path='%windir%\system32\inetsrv\test.dll'].allowed:False

Alternatively, to modify the description of an ISAPI restriction, type the following at the command prompt, and then press ENTER:

appcmd set config /section:isapiCgiRestriction /[path='%windir%\system32\inetsrv\test.dll'].description:"Test ISAPI Extension"

For more information about Appcmd.exe, see Appcmd.exe (IIS 7).

Configuration

The procedure in this topic affects the following configuration elements:

<add> under <isapiCgiRestriction>

For more information about IIS 7 configuration, see IIS 7.0: IIS Settings Schema on MSDN.

WMI

Use the following WMI classes, methods, or properties to perform this procedure:

IsapiCgiRestrictionSection.IsapiCgiRestriction property

For more information about WMI and IIS, see Windows Management Instrumentation (WMI) in IIS 7. For more information about the classes, methods, or properties associated with this procedure, see the IIS WMI Provider Reference on the MSDN site.