<META HTTP-EQUIV="PICS-Label" CONTENT='(PICS-1.1 "http://www.rsac.org/ratingsv01.html" l comment "RSACi North America Server" by "inet@microsoft.com" r (n 0 s 0 v 0 l 0))' />
<TITLE>Internet Information Services Features : [Microsoft Windows 2000, Windows 2000 Server, Product Information, Web Server, Internet Server, IIS, ASP pages, ActiveX, Web Distributed Authoring and Versioning, WebDAV, FrontPage, Server Extensions, ]</TITLE>
<META NAME="KEYWORDS" CONTENT="Microsoft Windows 2000, Windows 2000 Server, Product Information, Web Server, Internet Server, IIS, ASP pages, ActiveX, Web Distributed Authoring and Versioning, WebDAV, FrontPage, Server Extensions, ">
<META NAME="DESCRIPTION" CONTENT="Integrated into the operating system, Internet Information Services 5.0 (IIS) supports corporate intranets and Web-based Internet business solutions.">
<TD WIDTH="100%"><!--mstheme--><font face="Times New Roman"><A CLASS="NavLink" HREF="file:///D:/Documents and Settings/ericbrus/My Documents/My Webs/myweb12/server/features/exploring.asp" >Technologies in Depth</A><!--mstheme--></font></TD>
<TD WIDTH="15"><!--mstheme--><font face="Times New Roman"> <!--mstheme--></font></TD>
<TD WIDTH="10"><!--mstheme--><font face="Times New Roman"> <!--mstheme--></font></TD>
<TD WIDTH="10"><!--mstheme--><font face="Times New Roman"><IMG SRC="/windows2000/images/1ptrans.gif" WIDTH="10" HEIGHT="1" /><!--mstheme--></font></TD>
<TD><!--mstheme--><font face="Times New Roman"><IMG SRC="/windows2000/images/1ptrans.gif" WIDTH="10" HEIGHT="1" /><!--mstheme--></font></TD>
<TD WIDTH="100%"><!--mstheme--><font face="Times New Roman"><A CLASS="NavLink" HREF="file:///D:/Documents and Settings/ericbrus/My Documents/My Webs/myweb12/server/features/choosing.asp" target="_top">Choosing the Right Server</A><!--mstheme--></font></TD>
<TD WIDTH="15"><!--mstheme--><font face="Times New Roman"> <!--mstheme--></font></TD>
<TD WIDTH="10"><!--mstheme--><font face="Times New Roman"> <!--mstheme--></font></TD>
<TD CLASS="NavItemSelected" COLSPAN="3"><!--mstheme--><font face="Times New Roman"><A CLASS="NavLink" HREF="/windows2000/upgrade/default.asp" TARGET="_top">Upgrading to Windows 2000</A><!--mstheme--></font></TD>
<TD WIDTH="15"><!--mstheme--><font face="Times New Roman"> <!--mstheme--></font></TD>
<TD WIDTH="20" VALIGN="TOP"><!--mstheme--><font face="Times New Roman">
<A HREF="mailto:?subject=An article from Microsoft&body=This article is from the Microsoft Windows 2000 Web site. http://www.microsoft.com/windows2000/guide/server/features/web.asp"><IMG SRC="/windows2000/images/icoEmail2.gif" WIDTH="20" HEIGHT="15" BORDER="0"></A>
<!--mstheme--></font></TD>
<TD VALIGN="TOP" NOWRAP><!--mstheme--><font face="Times New Roman">
<A CLASS="finePrint" HREF="mailto:?subject=An article from Microsoft&body=This article is from the Microsoft Windows 2000 Web site. http://www.microsoft.com/windows2000/guide/server/features/web.asp">Send this document<BR />to a colleague</A><BR />
<!--mstheme--></font></TD>
<TD WIDTH="15"><!--mstheme--><font face="Times New Roman"><IMG SRC="/windows2000/images/ts.gif" WIDTH="15" HEIGHT="1" /><!--mstheme--></font></TD>
<TD WIDTH="28" VALIGN="TOP" NOWRAP><!--mstheme--><font face="Times New Roman">
<A HREF="file:///D:/Documents and Settings/ericbrus/My Documents/My Webs/myweb12/server/features/web.asp"><IMG SRC="/windows2000/images/icoPrinter.gif" WIDTH="22" HEIGHT="15" BORDER="0"></A>
<!--mstheme--></font></TD>
<TD VALIGN="TOP" NOWRAP><!--mstheme--><font face="Times New Roman">
<A CLASS="finePrint" HREF="file:///D:/Documents and Settings/ericbrus/My Documents/My Webs/myweb12/server/features/web.asp">Printer-friendly<BR>version</A><BR>
<!--mstheme--></font></TD>
<TD WIDTH="15"><!--mstheme--><font face="Times New Roman"><IMG SRC="/windows2000/images/ts.gif" WIDTH="15" HEIGHT="1" /><!--mstheme--></font></TD>
<!--mstheme--></font></TD>
</TR>
</TABLE><!--mstheme--><font face="Times New Roman">
<TR><TD><!--mstheme--><font face="Times New Roman"><!--msthemeseparator--><p align="center"><img src="../../_themes/copy-of-tilt/atlrule.gif" width="600" height="10"></p><!--mstheme--></font></TD></TR>
</TABLE><!--mstheme--><font face="Times New Roman">
<SPAN CLASS="field" ID="fld_bodycopy">
<p> The Windows® 2000 Server operating system integrates Internet technologies across all services, from File and Print to advanced line-of-business application services. This helps ensure organizations can more effectively exchange information with customers, partners, and employees worldwide.</p>
<p>Windows 2000 Server meets the needs of a broad spectrum of users, from corporate intranets to Internet Service Providers hosting Web sites receiving millions of hits per day. Because Internet Information Server 5.0 (IIS) is fully integrated at the operating system level, Windows 2000 Server lets organizations add Internet capabilities that weave directly into the rest of their computing infrastructure.</p>
<p>Specifically, Windows 2000 Server lets organizations:</p>
<!--msthemelist--><tr><td valign="baseline" width="42"><img src="../../_themes/copy-of-tilt/atlbull1.gif" width="15" height="15" hspace="13" alt="bullet"></td><td valign="top" width="100%"><!--mstheme--><font face="Times New Roman"><b>Share information more efficiently using the Web.</b><br>
In the past, performing standard file operations on a network file share was much easier than performing similar operations on a remote Web site. Now, Windows 2000 Server technologies such as Web Distributed Authoring and Versioning (WebDAV) make it as easy to carry out standard file operations on a Web share.
<!--msthemelist--><tr><td valign="baseline" width="42"><img src="../../_themes/copy-of-tilt/atlbull1.gif" width="15" height="15" hspace="13" alt="bullet"></td><td valign="top" width="100%"><!--mstheme--><font face="Times New Roman"><b>Create Web-based business applications.</b><br>
Creating Web-based applications that integrate well into traditional business applications can be difficult. Windows 2000 Server overcomes this burden by sharing internet-aware application development tools with IIS, an efficiency that extends applications to the Web and eliminates awkward bridges between internal and external processes.
<!--msthemelist--><tr><td valign="baseline" width="42"><img src="../../_themes/copy-of-tilt/atlbull1.gif" width="15" height="15" hspace="13" alt="bullet"></td><td valign="top" width="100%"><!--mstheme--><font face="Times New Roman"><b>Bring server operating system functionality to the Web.</b><br>
In addition to allowing
organizations to extend basic file and print services to the Web,
Windows 2000 Server supports applications, media, and communications and
networking services from a common server platform. This convergence means that
everything a company can do with Windows 2000 Server is automatically
supported in a fully integrated Web environment.<!--mstheme--></font><!--msthemelist--></td></tr>
<!--msthemelist--></table><!--mstheme--><font face="Times New Roman">
<!--msthemelist--><tr><td valign="baseline" width="42"><img src="../../_themes/copy-of-tilt/atlbull1.gif" width="15" height="15" hspace="13" alt="bullet"></td><td valign="top" width="100%"><!--mstheme--><font face="Times New Roman"><A href="#heading4">Bringing Server Operating System Functionality to the Web</A>
<!--msthemelist--><tr><td valign="baseline" width="42"><img src="../../_themes/copy-of-tilt/atlbull1.gif" width="15" height="15" hspace="13" alt="bullet"></td><td valign="top" width="100%"><!--mstheme--><font face="Times New Roman"><A href="#heading5">Securing Web Services</A><!--mstheme--></font><!--msthemelist--></td></tr>
<!--msthemelist--></table><!--mstheme--><font face="Times New Roman">
<!--mstheme--></font><TABLE CELLPADDING=0 CELLSPACING=0 BORDER=0 WIDTH="100%"><!--Start of 'back to top' heading-->
<TR valign=bottom>
<TD><!--mstheme--><font face="Times New Roman"><A NAME=heading2></A><H1><!--mstheme--><font color="#400040">Sharing Information <!--mstheme--></font></H1><!--mstheme--></font></TD>
<TD align=right><!--mstheme--><font face="Times New Roman"><A class=finePrint href="#top">Back to Top</A><!--mstheme--></font></TD>
</TR>
</TABLE><!--mstheme--><font face="Times New Roman">
<th width="30%"><!--mstheme--><font face="Times New Roman"><p><b>Feature</b></p></th>
<th width="70%"><!--mstheme--><font face="Times New Roman"><p><b>Description</b></p></th>
</tr>
<tbody>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>Support for Web Distributed Authoring and Versioning (WebDAV)</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>WebDAV is an Internet standard that lets multiple
people collaborate on a document using an Internet-based shared file
system. It addresses issues such as file access permissions, offline
editing, file integrity, and conflict resolution when competing changes
are made to a document. WebDAV expands an organization's infrastructure by
using the Internet as the central location for storing shared
files.</p> <!--mstheme--></font></td></tr>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>Web Folders</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>Support for Web Folders lets users navigate to a
WebDAV-compliant server and view the content as if it were part of the
same namespace as the local system. Users can drag and drop files,
retrieve or modify file property information, and perform other file
system-related tasks. Web Folders let users maintain a consistent look and
feel between navigating the local file system, a networked drive, and an
Internet Web site.</p> <!--mstheme--></font></td></tr>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>Support for FrontPage Server Extensions</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>Windows 2000 Server lets administrators use
Microsoft FrontPage« Web authoring and management features to deploy and
manage Web sites. With FrontPage Server Extensions, administrators can
view and manage a Web site in a graphical interface, so creating Web sites
with the FrontPage Web site creation and management tool is as easy as
clicking a check box on a property page for the Web site. In addition,
authors can create, edit, and post Web pages to IIS remotely.</p> <!--mstheme--></font></td></tr>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>Support for latest Internet standards</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>Using the integrated Web services in
Windows 2000 Server, organizations can take advantage of the latest
Internet standards to publish and share information over the Web.
Microsoft Internet Information Services (IIS) 5.0 complies with the HTTP
1.1 standard, including features such as PUT and DELETE, the ability to
customize HTTP error messages, and support for custom HTTP headers.
Support for the latest protocols provides optimum performance for Web
server connections.</p> <!--mstheme--></font></td></tr>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>Support for multiple sites with one IP address</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>With support for host headers, an organization can
host multiple Web sites on a single computer running Microsoft
Windows 2000 Server with only one Internet Protocol (IP) address.
This lets Internet service providers (ISPs) and corporate intranets host
multiple Web sites on a single server while offering separate user domains
for each site.</p> <!--mstheme--></font></td></tr>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>News and Mail</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>Administrators can use Simple Mail Transfer
Protocol (SMTP) and Network News Transport Protocol (NNTP) Services to set
up intranet mail and news services that work in conjunction with IIS. SMTP
is a commonly used protocol for sending e-mail messages between servers;
NNTP is the protocol used to post, distribute, and retrieve USENET
messages.</p> <!--mstheme--></font></td></tr>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>PICS Ratings</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>Administrators can apply Platform for Internet
Content Selection (PICS) ratings to sites that contain content for mature
audiences. This lets them host a variety of sites and provide information
about suitability for particular audiences.</p> <!--mstheme--></font></td></tr>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>HTTP Compression</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>HTTP compression allows faster transmission of
pages between the Web server and compression-enabled clients. This is
useful in situations where bandwidth is limited.</p> <!--mstheme--></font></td></tr>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>File Transfer Protocol (FTP) and FTP Restart</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>The File Transfer Protocol (FTP) service, used to
publish information to a Web server, is integrated into Windows 2000
Server. FTP Restart provides a faster, smoother way to download
information from the Internet. Now, if an interruption occurs during data
transfer from an FTP site, a download can be resumed without having to
download the entire file over again.</p> <!--mstheme--></font></td></tr>
</tbody></table><!--mstheme--><font face="Times New Roman">
<p></p>
<!--mstheme--></font><TABLE CELLPADDING=0 CELLSPACING=0 BORDER=0 WIDTH="100%"><!--Start of 'back to top' heading-->
<TR valign=bottom>
<TD><!--mstheme--><font face="Times New Roman"><A NAME=heading3></A><H1><!--mstheme--><font color="#400040">Creating Web-Based Applications<!--mstheme--></font></H1><!--mstheme--></font></TD>
<TD align=right><!--mstheme--><font face="Times New Roman"><A class=finePrint href="#top">Back to Top</A><!--mstheme--></font></TD>
</TR>
</TABLE><!--mstheme--><font face="Times New Roman">
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>Browser Capabilities Component</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>ASP has a new feature for determining the exact
capabilities of a browser. When a browser sends a cookie describing its
capabilities (such a cookie can be installed by using a simple client-side
script), developers can create an instance of the Browser Capabilities
Component that retrieves the browser's properties as returned by the
cookie. Developers can use this feature to discover a browser's
capabilities and adjust an application accordingly.</p> <!--mstheme--></font></td></tr>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>ASP Self-Tuning</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>ASP now senses when executing requests are blocked
by external resources and automatically provides more threads to
simultaneously execute additional requests while continuing processing. If
the CPU becomes overburdened, ASP curtails the number of threads in order
to reduce the constant switching that occurs when too many non-blocking
requests are executing simultaneously.</p> <!--mstheme--></font></td></tr>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>Encoded ASP Scripts</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>Traditionally, Web developers have been unable to
prevent others from reading their scripting code. ASP now supports a new
script encoding utility provided with Microsoft Visual Basic Scripting
Edition (VBScript) and Microsoft JScript 5.0. Web developers can apply an
encoding scheme to both client and server-side scripts that makes the
programmatic logic unreadable. When unencoded, the logic appears in
standard ASCII characters. Encoded scripts are decoded at run time by the
script engine, so there's no need for a separate utility. Although this
feature is not intended as a secure, encrypted solution, it can prevent
most casual users from browsing or copying scripts.</p> <!--mstheme--></font></td></tr>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>Application Protection</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>IIS 5.0 offers improved protection and increased
reliability for Web applications. By default, IIS runs all applications in
a common or pooled process that is separate from core IIS processes. In
addition, administrators can still isolate mission-critical applications
that should be run outside of both core IIS and pooled
processes.</p> <!--mstheme--></font></td></tr>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>ADSI 2.0</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>Administrators and application developers can add
custom objects, properties, and methods to the existing Active Directory
Service Interfaces (ADSI) provider, giving administrators more flexibility
in configuring sites. ADSI is a COM-based directory service model that
lets ADSI-compliant client applications access a wide variety of distinct
directory protocols, including Windows Directory Services and Lightweight
Directory Access Protocol (LDAP), while using a single, standard set of
interfaces. ADSI shields the client application from the implementation
and operational details of the underlying data store or
protocol.</p> <!--mstheme--></font></td></tr>
</tbody></table><!--mstheme--><font face="Times New Roman">
<p></p>
<!--mstheme--></font><TABLE CELLPADDING=0 CELLSPACING=0 BORDER=0 WIDTH="100%"><!--Start of 'back to top' heading-->
<TR valign=bottom>
<TD><!--mstheme--><font face="Times New Roman"><A NAME=heading4></A><H1><!--mstheme--><font color="#400040">Bringing Server Operating System Functionality to the Web<!--mstheme--></font></H1><!--mstheme--></font></TD>
<TD align=right><!--mstheme--><font face="Times New Roman"><A class=finePrint href="#top">Back to Top</A><!--mstheme--></font></TD>
</TR>
</TABLE><!--mstheme--><font face="Times New Roman">
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>Per Web Site Bandwidth Throttling</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>This lets administrators regulate the amount of
server bandwidth each site uses. This lets an ISP, for example, guarantee
a predetermined amount of bandwidth to each site.</p> <!--mstheme--></font></td></tr>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>Integrated Setup & Upgrade</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>Internet Information Server (IIS) 5.0 installs as
a networking service of Windows 2000 Server. Customers with any
existing version of Windows NT Server 3.51 or 4.0 will automatically be
upgraded to the new Web services in Windows 2000 Server and can take
advantage of the new features and services of Windows 2000 Server and
IIS.</p> <!--mstheme--></font></td></tr>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>Microsoft Management Console (MMC) Task Pad</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>The MMC task pad considerably simplifies the
administration of an IIS server. For example, if a user selects a server
under the IIS MMC snap-in, the task pad will display wizards for creating
new Web and FTP sites. Administrators simply select the task they want to
complete, and a wizard walks them through the steps.</p> <!--mstheme--></font></td></tr>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>Dfs as Filing System for IIS</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>You can use Microsoft Dfs as the filing system for
IIS by selecting the root for the web site as a Dfs root. Doing so lets
you move resources within the Dfs tree without affecting any HTML links.
(Windows Media Services content can also be stored in the Dfs
tree.)</p> <!--mstheme--></font></td></tr>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>Improved Command-line Administration Scripts</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>IIS ships with scripts that can be executed from
the command line to automate the management of common Web server tasks.
Administrators can create custom scripts that automate the management of
IIS.</p> <!--mstheme--></font></td></tr>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>Reliable IIS Restart</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>Users can stop and restart all Internet services
from within the IIS MMC snap-in, which makes it unnecessary to restart the
computer when applications become unavailable.</p> <!--mstheme--></font></td></tr>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>Backing Up and Restoring IIS</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>Administrators can back up and save metabase
settings to make it easy to return to a safe, known state. (A metabase is
the structure for storing IIS configuration settings; the metabase
performs some of the same functions as the system registry, but uses less
disk space.)</p> <!--mstheme--></font></td></tr>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>Process Accounting</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>Process Accounting, which is enabled and customized on a per-site basis, lets administrators monitor and log how Web sites use CPU resources on the server. Both system administrators and application developers can use this feature to determine CPU utilization.
<br><br>Internet service
providers (ISPs) can use this information to determine which sites are
using disproportionately high CPU resources or that may have
malfunctioning scripts or Common Gateway Interface (CGI) processes. IT
managers can use this information to charge back the cost of hosting a Web
site and/or application to the appropriate division within a company.</p>
<!--mstheme--></font></td></tr>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>Improved Custom Error Messages</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>Administrators can now send informative messages
to clients when HTTP or ASP errors occur on their Web sites. They can use
the custom errors that IIS 5.0 provides or create their own.</p> <!--mstheme--></font></td></tr>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>Configuration Options</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>Administrators can set permissions for read,
write, execute, script, and FrontPage Web operations at the site,
directory, or file level.</p> <!--mstheme--></font></td></tr>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>Remote Administration</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>IIS 5.0 has Web-based administration tools that
allow remote management of a server from almost any browser on any
platform. With IIS 5.0, administrators can set up administration accounts
called Operators with limited administration privileges on Web sites, to
help distribute administrative tasks.</p> <!--mstheme--></font></td></tr>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>Terminal Services</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>The Terminal Services support in Windows 2000
Server lets administrators remotely administer IIS by using the Microsoft
Management Console (MMC) over a dial-up or PPTP connection. To do this,
the Terminal Services client must be installed on client
computers.</p> <!--mstheme--></font></td></tr>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>Centralized Administration</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>Administrators can use the MMC snap-in for IIS
from a computer running Windows 2000 Professional to administer a
computer on their intranet running Internet Information Services on
Windows 2000 Server.</p> <!--mstheme--></font></td></tr>
</tbody></table><!--mstheme--><font face="Times New Roman">
<p></p>
<!--mstheme--></font><TABLE CELLPADDING=0 CELLSPACING=0 BORDER=0 WIDTH="100%"><!--Start of 'back to top' heading-->
<TR valign=bottom>
<TD><!--mstheme--><font face="Times New Roman"><A NAME=heading5></A><H1><!--mstheme--><font color="#400040">Securing Web Services<!--mstheme--></font></H1><!--mstheme--></font></TD>
<TD align=right><!--mstheme--><font face="Times New Roman"><A class=finePrint href="#top">Back to Top</A><!--mstheme--></font></TD>
</TR>
</TABLE><!--mstheme--><font face="Times New Roman">
<th width="30%"><!--mstheme--><font face="Times New Roman"><p><b>Feature</b></p></th>
<th width="70%"><!--mstheme--><font face="Times New Roman"><p><b>Description</b></p></th>
</tr>
<tbody>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>Integrated Web Security</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>The Windows 2000 Server Web services are fully integrated with the Kerberos security infrastructure. The Kerberos Version 5 authentication protocol, which provides fast, single logon to Windows 2000 Server, replaces NTLM as the primary security protocol for access to resources within or across Windows 2000 domains. Users can securely authenticate themselves to a Windows 2000 Server Web site and will not have to undergo a separate authentication (logon) to use other resources.
<br><br>In addition, Windows 2000 Server now also supports the following standard authentication protocols, which are applicable to Web-based users and ordinary network users alike:
<!--msthemelist--><tr><td valign="baseline" width="42"><img src="../../_themes/copy-of-tilt/atlbull1.gif" width="15" height="15" hspace="13" alt="bullet"></td><td valign="top" width="100%"><!--mstheme--><font face="Times New Roman">Digest Authentication: the latest authentication standard of the World Wide Web Consortium (W3C), the organization that sets standards for the Web and HTML.
<!--msthemelist--><tr><td valign="baseline" width="42"><img src="../../_themes/copy-of-tilt/atlbull1.gif" width="15" height="15" hspace="13" alt="bullet"></td><td valign="top" width="100%"><!--mstheme--><font face="Times New Roman">Server-Gated Cryptography (SGC): used by financial institutions to transmit private documents via the Internet.
<!--msthemelist--><tr><td valign="baseline" width="42"><img src="../../_themes/copy-of-tilt/atlbull1.gif" width="15" height="15" hspace="13" alt="bullet"></td><td valign="top" width="100%"><!--mstheme--><font face="Times New Roman">Fortezza: The U.S. government security
<!--msthemelist--><tr><td valign="baseline" width="42"><img src="../../_themes/copy-of-tilt/atlbull1.gif" width="15" height="15" hspace="13" alt="bullet"></td><td valign="top" width="100%"><!--mstheme--><font face="Times New Roman">Certificate Wizard simplifies certificate administration tasks, such as creating certificate requests and managing the certificate life cycle. Secure Sockets Layer (SSL) security is an increasingly common requirement for Web sites that provide e-commerce and access to sensitive business information. The new wizard makes it easy to set up SSL-enabled Web sites on Windows 2000 Server - administrators can easily establish and maintain SSL encryption and client certificate authentication. (A client certificate contains detailed identification information about the user and organization that issued the certificate.)
<!--msthemelist--><tr><td valign="baseline" width="42"><img src="../../_themes/copy-of-tilt/atlbull1.gif" width="15" height="15" hspace="13" alt="bullet"></td><td valign="top" width="100%"><!--mstheme--><font face="Times New Roman">Permission Wizard walks administrators through the tasks of setting up permissions and authenticated access on an IIS Web site, making it much easier to set up and manage a Web site that requires authenticated access to its content.
administrators configure certificate trust lists (CTLs). A CTL is a list
of trusted certification authorities (CAs) for a particular directory.
CTLs are especially useful for Internet service providers (ISPs) who
have several Web sites on their server and who need to have a different
list of approved certification authorities for each site.<!--mstheme--></font><!--msthemelist--></td></tr>
<!--msthemelist--></table><!--mstheme--><font face="Times New Roman"><!--mstheme--></font></td></tr>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>IP and Internet Domain Restrictions</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>Administrators can grant or deny Web access to
individual computers, groups of computers, or entire domains.</p> <!--mstheme--></font></td></tr>
<tr><td valign="top"><!--mstheme--><font face="Times New Roman"><p><b>Kerberos Version 5 Authentication Protocol Compliance</b></p><!--mstheme--></font></td>
<td valign="top"><!--mstheme--><font face="Times New Roman"><p>IIS is fully integrated with the Kerberos v5
authentication protocol implemented in Microsoft Windows 2000. This
means administrators can pass authentication credentials among connected
