How to setup IIS 5.0 on XP Home
Author: jason
Date: 2002-10-18
Category: Technical

Installing a full version of IIS on XP Home isn't too hard. All that's needed is a Windows 2000 CD for a couple files and trick XP Home into installing IIS.

1. Go into SysOc.inf (in Windows/INF) look for this line:
Code

iis=iis.dll,OcEntry,iis.inf,,7


Change it to:
Code

iis=iis2.dll,OcEntry,iis2.inf,,7


2. Then get the IIS.DLL and IIS.INF off the W2K CD, put them in a temp folder.
3. They'll probably be packed down. But you can extract them with the EXPAND command from within the temp folder. Drop into DOS, change to the temp dir, type
Code

EXPAND iis.dl_ iis.dll


4. After they are uncompressed rename them to IIS2.DLL and IIS2.INF.
5. Put the DLL file into system32/setup and the INF into the INF folder.
6. Then go to Add/Remove - Windows Setup. And check the box for IIS. You'll need the XP and W2K CD to complete the installation.

This works for XP Home, and should XP Pro (though I wonder if XP Pro doesn't already have the full-fledged IIS 5.0)...

An article about this is here: http://www.15seconds.com/issue/020118.htm

If you really worried about security there are a number of things to to lock down IIS.
1. Change the default NTFS permissions !!!
2. Remove/Rename/Relocate the default folders/scripts
3. Set the correct permissions on the registry
4. Run the IIS LockDown tool
5. Keep it patched with updates from MS
6. Put No Access on the cmd.exe for IUSR

Permissions links:
http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q271071&LN=EN-US
http://www.jsifaq.com/SUBD/tip1800/rh1806.htm
http://www.iisfaq.com/default.asp?View=P78

With proper security settings IIS is not too bad of a web server.



jason @ jasonthomasfrance.com - www.masterstationlog.com - copyright 2009