Using IIS Reports Remotely

Walkthrough Goal

This walkthrough will guide you through the process of setting up and using IIS Reports in a hosted environment. We will look at how to give security permissions to folders to delegate IIS Reports to sites and applications.

Prerequisites

The walkthrough requires the following prerequisites:

• Administration Pack Technical Preview

• Log Parser

Part 1:  Setup Remote Management Service

Make sure WmSvc, the service used for remote management, is running and it accepting remote connections.

1. To start WmSvc, go to server node and on the page go to management service under Management.
2. At the top of the dialog click “Enable Remote Connections.”  If the enable remote connection cannot be checked, stop the service to enable remote connection.
3. Start the service by pressing start on the Action pane on the right.

Part 2:  Give The Remote Service Access to Log Parser

LogParser is used in the Web Server and Remote Management reports.  To allow users in a remote connection to view the reports we need to give WmSvc read permission of the log files.

Command Line: 

You can do this by executing the following command line at C:\Windows\System32\inetsrv:

icacls %systemdrive%\inetpub\logs\LogFiles\W3SVC1 /grant "NT SERVICE\WMSvc:(OI)(CI)(RX)"

UI: 

1.  Go to the location your log files are stored

2.  Once you’re at the folder the log files are stored, right click on the directory by default named W3SVC1.

3  In the right click menu choose properties.

4.  Select Security and within the “Group or user names” category choose WMSvc.

Press Edit to change permissions.

Select “Allow” for Read access.  This now means that WMSvc, the remote management service, is allowed to read the log files.

Part 3:  Delegate Reports

 The part of the walkthrough mostly focuses on delegating reports to various site users. IIS Reports today ships with three categories of reports

1. Static Reports
2. Remote Management Reports
3. Web Server Reports

Remote Management Reports cannot be delegated to a site administrator. It can only be seen with a Connection scope of administrator and Configuration Path type of Site or Server.

 

How to delegate IIS Reports (Web Server Reports) to a Site?

1.  Drill down to site node and create a site called TestSite.

2.  Go to Server node, to “IIS Manager Users” and create a new IIS Manager User called TestUser and password as TestUser.

3.  Go to the site you just created and go to IIS Manager Permissions.

4.  Allow the IIS Manager User you just created to access the website.

5.  Go back to server node, and to feature delegation and in click Custom Site Delegation on the tasklist.

6.  In the drop down list, select the site you just created and delegate IisReports (Web Server Reports) and remove delegation for IisReports (Static Reports).

7.  Try Connecting to the site (TestSite) and navigate to IIS Reports.

8.  You will see Only Web Server Reports is shown and Static Reports is gone

Note:

1. You have to close inetmgr and reopen it for the settings to take place.
2. Also if the site administrator is already connected to the server remotely. He/She needs to reconnect for settings to take place.

Comments