Microsoft KB Archive/321142

= HOW TO: Hide the Metabase to Increase IIS Security =

Article ID: 321142

Article Last Modified on 11/21/2006

-

APPLIES TO


 * Microsoft Internet Information Server 4.0
 * Microsoft Internet Information Services 5.0
 * Microsoft Internet Information Services 5.1

-



This article was previously published under Q321142



We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx



Important This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry

IN THIS TASK
SUMMARY
 * Locate, Move, and Change the File Name of the Metabase
 * Add a Registry Entry for MetaDataFile

REFERENCES



SUMMARY
This step-by-step article explains how to change the location of the metabase for Internet Information Services (IIS) to increase the security of the metabase file.

back to the top

Locate, Move, and Change the File Name of the Metabase

 * 1) Locate the Metabase.bin file. By default, the Metabase.bin file is located in the %systemroot%\system32\inetsrv folder.Note You may want to create a backup copy of the metabase before you proceed.


 * 1) Stop the IIS Admin Service. This also stops the dependent Web services.
 * 2) Move the Metabase.bin file to a new folder.
 * 3) Verify that the NTFS permissions are set correctly for the Metabase.bin file and the new folder.
 * 4) Rename the Metabase.bin with a new name, a new file name extension, or both (for example, Filename.ext).

back to the top

Add a Registry Entry for MetaDataFile
WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.  Start Registry Editor (Regedt32.exe). Locate and click the following key in the registry:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\INetMgr\Parameters

 On the Edit menu, click New, click String Value, and then add the following registry value:

Value name: MetadataFile

Data type: REG_SZ

Value data:

NOTE:  specifies the new complete path of the metabase file, including the drive letter, folder, file name, and file name extension.

 Quit Registry Editor.

back to the top



MORE INFORMATION
The location of the metabase cannot be modified in IIS 6.0 in Microsoft Windows Server 2003.

