
Microsoft
®
Windows Server
™
2003 White Paper
Windows NT 4.0 Server Upgrade Guide 113
To decrease the attack surface of a server, IIS 6.0 is disabled by default when you upgrade from
Windows 2000 Server to Windows Server 2003 unless you do one of the following:
• For manual or unattended upgrades, run the IIS Lockdown Tool on your Windows 2000
Server before starting the upgrade process.
• For manual or unattended upgrades, add the registry entry RetainW3SVCStatus to the
registry.
• For unattended upgrades, add the entry DisableWebServiceOnUpgrade = False in the
unattended install script.
• Continue with the upgrade and enable the WWW service after upgrade.
Windows Server 2003 Processing Architecture
The processing architecture of IIS 6.0 varies depending on the configuration of the application
isolation setting. When the setting is configured for IIS 5.0 isolation mode, calls coming into
HTTP.sys are routed to a user mode process: Inetinfo.exe, Dllhost.exe, or Aspnet_wp.exe. Which
process handles the call depends on the particular type of request as well as how the virtual
directory is configured. All ASP.NET applications run under the Aspnet_wp.exe process. However,
traditional ASP Web applications run as follows:
• Those with a low application protection setting run under Inetinfo.exe.
• Those with a medium application protection setting run under the shared instance of Dllhost.exe.
• Those with a high application protection setting run under their own instance of Dllhost.exe.
To control the process in which an ASP application runs, you can configure the Application
Protection setting to low, medium, or high using the dialog box shown in Figure 52.
Comentarios a estos manuales