How to: Verify or Correct the IIS Configuration for a Web Site or Virtual Directory

  • Article

You might have problems when you try to access a Web site or Web service for Team Foundation if any of the following Internet Information Services (IIS) configurations are not set correctly:

  • .NET Framework version

    Note

    For computers running Windows Server 2008, the ASP.NET version is assigned to the application pool under which the application runs. For more information, see How to: Verify or Correct the IIS Configuration for an Application Pool.

  • Authentication method

  • Permissions to execute scripts on a virtual directory

  • Access restrictions that are based on IP address or domain

    Note

    By default, Team Foundation Server is configured to grant all computers access to all Web sites for Team Foundation. Before you remove any restrictions, you should investigate why the settings were changed. Many organizations deny access to match their infrastructure requirements or security policies. 

  • Connection timeout

  • Local path

  • Default document for the Reports virtual directory

To verify or correct the IIS configuration of a Web site or virtual directory for Team Foundation, open the Internet Information Services (IIS) Manager, and verify the configuration assignments made to each Web site and virtual directory.

Web sites and virtual directories for Team Foundation have the following IIS tree structure:

  • Default Web Site (Windows Server 2003)

    • Reports

    • ReportServer

      Note

      You manage Reports and ReportServer in IIS for SQL Server 2005 but not for SQL Server 2008.

  • SharePoint Central Administration v3

  • Team Foundation Server

    • Build

    • Services

    • VersionControl

    • Warehouse

    • WorkItemTracking

  • Team Foundation Server Proxy

Required Permissions

To perform these procedures, you must be a member of the Administrators security group on the application-tier server for Team Foundation.

To verify or change the IIS configuration for a Web site or virtual directory in IIS 6.0

  1. Log on to the application-tier server for Team Foundation.

  2. Click Start, point to Administrative Tools, and then click Internet Information Services (IIS) Manager.

    Internet Information Services (IIS) Manager opens.

  3. In the tree pane, expand the local computer, and expand Web Sites.

  4. Right-click a Web site for Team Foundation (for example, Default Web Site) or a virtual directory, and click Properties.

  5. To verify the .NET Framework assignment, click the ASP.NET tab, and verify that 2.0.50727 for the ASP.NET version is selected. If it is not selected, select it, and then click Apply.

  6. To verify or correct the authentication method assignment:

    1. Click the Directory Security tab.

    2. Under the Authentication and access control group, click Edit.

      The Authentication Methods window appears.

    3. Verify that the Enable anonymous access check box is cleared. If it is selected, clear it.

    4. Verify that the Integrated Windows authentication check box is selected. If it is cleared, select it.

    5. Click OK to confirm the changes and close the window.

  7. To verify or correct the Execute permissions, do either of the following:

    • For a Web site, click the Home Directory tab. In the Execute permissions list, verify that the following options are clicked:

      Scripts and Executables for the Default Web Site and SharePoint Central Administration v3

      Scripts only for Team Foundation Server and Team Foundation Server Proxy

    • For a virtual directory, click the Virtual Directory tab, and verify that Scripts only is clicked.

    Modify the selection as needed, and then click Apply.

  8. To remove access restrictions that are based on IP address or domain name:

    1. Click the Directory Security tab.

    2. Under IP address and domain name restrictions, click Edit.

    3. Verify that Granted Access is clicked.

    4. Clear any unwanted restrictions.

    5. Click OK, click Apply, and then click OK.

  9. To verify or correct connection timeout assignments, click the Web Site tab, and verify that the Connection timeout assignments match or exceed the following default assignments:

    • 120 seconds for the Default Web Site and SharePoint Central Administration v3

    • 3600 seconds (1 hour) for Team Foundation Server and Team Foundation Server Proxy

  10. Click OK to close the property sheet.

  11. Repeat steps 4 through 10 for the remaining Web sites and virtual directories.

To verify or change the IIS configuration for a Web site or virtual directory in IIS 7.0

  1. Log on to the application-tier server for Team Foundation.

  2. On the Start menu, point to Administrative Tools, and click Internet Information Services (IIS) Manager.

    Internet Information Services (IIS) Manager opens.

  3. In the tree pane, expand the Sites node.

  4. Click a Web site for Team Foundation (for example, Default Web Site) or a virtual directory.

  5. To disable anonymous authentication:

    1. In the Web site or Virtual directory Home area, double-click Authentication.

    2. Right-click Anonymous Authentication, and then click Disable.

  6. To correct permissions to execute scripts for a virtual directory:

    1. In the VirtualDirectoryHome area, double-click Handler Mappings.

    2. In the Actions pane, click Edit Feature Permissions.

      The Edit Feature Permissions dialog box opens.

    3. Verify that the following check boxes are selected based on the Web site that you clicked in step 4:

      Web site

      Permissions

      Default Web Site

      Read, Script, and Execute

      SharePoint Central Administration v3

      Read, Script, and Execute

      Team Foundation Server

      Read and Script

    4. Click OK to close the dialog box.

  7. To remove access restrictions that are based on IP address or domain name from a Web site:

    1. In the WebSiteHome area, double-click IPV4 IP Address and Domain Restrictions.

    2. Click an IP address or domain, and then click Remove. Click Yes to verify that you want to remove the restriction.

    3. Repeat this step for each restriction that you want to remove.

  8. To verify or correct connection timeout assignments:

    1. In the Actions pane, under Manage Web Site, click Limits.

    2. In the Limits dialog box, verify that the Connection timeout assignments match or exceed the following default assignments:

      120 seconds for Description and SharePoint Central Administration v3

      3600 seconds (1 hour) for Team Foundation Server and Team Foundation Server Proxy

    3. Click OK to confirm the changes and close the window.

  9. Repeat steps 4 through 8 for the remaining Web sites and virtual directories.

Verify or Change the Local Path

The behavior of each Web site differs when it is not configured to use a valid local path directory. Usually, the Web site does not appear correctly, or an HTTP standard response code appears. The following HTTP response codes frequently appear as a result of this error:

  • 403   Forbidden error indicates that the request was a legal request, but the server is refusing to respond to it.

  • 404   Not Found error indicates that the client was able to communicate with the server, but the server could not locate a required resource to service the request.

To resolve this issue, use Windows Explorer to verify that the corresponding directory for each Web site exists. The following table lists the default path for each Web site:

Web sites for Team Foundation 

Default directory (Local path)

Default Web Site

..\Inetpub\wwwroot

   Reports

..\Program Files\Microsoft SQL Server\MSSQL.n\Reporting Services\ReportManager

NoteNote:
The number that is assigned to the MSSQL directory varies based on the SQL Server instance.

   ReportServer

..\Program Files\Microsoft SQL Server\MSSQL.n\Reporting Services\ReportServer

NoteNote:
The number that is assigned to the MSSQL directory varies based on the SQL Server instance.

Team Foundation Server

..\Program Files\Microsoft Visual Studio 2008 Team Foundation Server\Web Services

   Build

..\Program Files\Microsoft Visual Studio 2008 Team Foundation Server\Web Services\Build

   Services

..\Program Files\Microsoft Visual Studio 2008 Team Foundation Server\Web Services\Services

   VersionControl

..\Program Files\Microsoft Visual Studio 2008 Team Foundation Server\Web Services\VersionControl

   Warehouse

..\Program Files\Microsoft Visual Studio 2008 Team Foundation Server\Web Services\Warehouse

   WorkItemTracking

..\Program Files\Microsoft Visual Studio 2008 Team Foundation Server\Web Services\WorkItemTracking

SharePoint Central Administration (Windows SharePoint Services 2.0)

..\Program Files\Common Files\Microsoft Shared\Web Server Extensions\60\template\admin\1033

SharePoint Central Administration V3 (Windows SharePoint Services 3.0 or Microsoft Office SharePoint Server 2007)

For servers running Windows Server 2003:

\Inetpub\wwwroot\wss\VirtualDirectories\nnnnn

For servers running Windows Server 2008:

..\inetpub\wwwroot\wss\VirtualDirectories\nnnnn

Then open IIS Manager on the application-tier server, and verify or change the local path assignment to the correct directory.

To verify or change the local path assignment of a Web site or virtual directory in IIS 6.0

  1. Log on to the application-tier server for Team Foundation.

  2. Click Start, click Administrative Tools, and then click Internet Information Services (IIS) Manager.

    Internet Information Services (IIS) Manager opens.

  3. In the tree pane, expand the local computer, and expand Web Sites.

  4. To verify or change the local path for a Web site, perform the following steps:

    1. Right-click the Web site (for example, Default Web Site), and click Properties.

    2. On the Home Directory tab, verify that A directory located on this computer is selected.

    3. Verify that the directory that is assigned to the Local path matches the default directory that is listed in the table earlier in this topic. If the directory does not match, change it to the default assignment.

    4. Click Apply, and then click OK.

  5. To verify or change the local path for a virtual directory, perform the following steps:

    1. In the tree pane, expand the Web site that contains the virtual directory.

    2. Right-click the virtual directory (for example, Build under Team Foundation Server), and click Properties.

    3. On the Virtual Directory tab, verify that A directory located on this computer is selected.

    4. Verify that the directory that is assigned to the Local path matches the default listed in the table earlier in this topic. If the directory does not match, change it to the default assignment.

    5. Click Apply, and then click OK.

To verify or change the path assignment of a Web site or virtual directory in IIS 7.0

  1. On the Start menu, point to Administrative Tools, right-click Internet Information Services (IIS) Manager, and then click Run as administrator.

  2. In the Connections pane, expand the local computer, and expand Sites.

  3. As needed, expand the Web site that contains the virtual directory.

  4. Click the Web site or virtual directory, and then click Basic Settings in the Actions area.

    The Edit Site dialog box appears.

  5. In Physical path, verify that the path matches the default path as listed in the table earlier in this topic. If the paths do not match, click the Browse button (…), change the local path to the default path, and click OK.

  6. Click OK.

See Also

Tasks

How to: Verify or Correct the IIS Configuration for an Application Pool

Resolving Problems Accessing Web Services

Other Resources

Correcting Connection and Configuration Procedures