Microsoft KB Archive/326086

= HOW TO: Isolate Web Applications into Their Own Process =

Article ID: 326086

Article Last Modified on 11/21/2006

-

APPLIES TO


 * Microsoft Internet Information Server 4.0
 * Microsoft Internet Information Services 5.0
 * Microsoft Internet Information Services 5.1

-



This article was previously published under Q326086



We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx



IN THIS TASK
SUMMARY
 * IIS 4.0
 * IIS 5.0
 * IIS 5.1

REFERENCES



SUMMARY
This step-by-step article describes how to isolate applications in Internet Information Server (IIS) 4.0 and Internet Information Services (IIS) versions 5.0 and later in their own respective processes.

In this article, all isolation steps are performed at the Web site level instead of at the virtual directory level. If an application must be isolated at the virtual directory level, follow the same steps, but use the Virtual Directory tab instead of the Home Directory tab.

back to the top

IIS 4.0

 * 1) Click Start, point to Program Files, click Windows NT 4.0 Option Pack, click Microsoft Internet Information Server, and then click Internet Service Manager.
 * 2) In the Internet Service Manager (ISM), right-click the Web site that you want to isolate, and then click Properties.
 * 3) In the Web site Properties dialog box, click the Home Directory tab.
 * 4) On the Home Directory tab, click to select the Run in separate memory space check box.
 * 5) Click OK.

Note Because the IIS services are already running and the site is currently in the Inetinfo (Inetinfo.exe) process, you must restart the IIS services. You do not have to do this right away. To do this, follow these steps:
 * 1) Click Start, click Run, type cmd, and then click Run.
 * 2) At the command prompt, type net stop iisadmin /y.
 * 3) When the services have stopped, type the following to restart each individual service that is installed:
 * 4) * WWW: net start w3svc
 * 5) * File Transfer Protocol (FTP): net start msftpsvc
 * 6) * Simple Mail Transfer Protocol (SMTP): net start smtpsvc
 * 7) * Network News Transfer Protocol (NNTP): net start nntpsvc

back to the top

IIS 5.0

 * 1) Click Start, point to Program Files, point to Administrative Tools, and then click Internet Services Manager.
 * 2) In the ISM, right-click the Web site that you want to isolate, and then click Properties.
 * 3) In the Web site Properties dialog box, click the Home Directory tab.
 * 4) Under Application Settings, click High (Isolated) in the Application Protection drop-down list.
 * 5) Click OK.

Note You do not have to restart IIS services for this change to take effect. The Web server will finish processing any current requests for the application before creating a separate process. At the next request for the application, it will run in a separate memory space.

back to the top

IIS 5.1

 * 1) Click Start, click Control Panel, point to Administrative Tools, and then click Internet Information Services.
 * 2) In the Internet Information Services Manager (ISM), right-click the Web site that you want to isolate in its own process, and then click Properties.
 * 3) In the Web site properties, click the Home Directory tab.
 * 4) Under Application Settings, click High (Isolated) in the Application Protection drop-down list.
 * 5) Click OK.

Note You do not have to restart IIS services for this change to take effect. The Web server will finish processing any current requests for the application before creating a separate process. At the next request for the application, it will run in a separate memory space.

back to the top

