IIS
- Home
- Logging Guide
- What is IIS Manager?
What is IIS Manager?
In this page
- What is an IIS Manager used for?
- How do you open IIS Manager?
- Benefits of using IIS Manager
- How ManageEngine EventLog Analyzer optimizes Microsoft IIS Manager using its end-to-end capabilities
IIS Manager, or Internet Information Services (IIS) Manager, is a graphical user interface tool that enables administrators to seamlessly manage IIS servers from devices running on Windows operating systems. It provides administrators a centralized, easy-to-use interface to manage IIS web servers, configure web applications, monitor health, and optimize performance across their web infrastructure.
What is an IIS Manager used for?
IIS Manager's powerful interface allows administrators to perform higher-level tasks, like efficient management of websites, virtual directories, and other server components. It also supports secure delegation of site and configuration management to users for managing their own sites and settings remotely. IIS Manager helps with:
Hosting websites: IIS Manager allows administrators to create, configure, and manage websites and applications hosted on the server. This includes setting up virtual directories, managing application pools, and assigning security settings.
Performing health and diagnostics: IIS Manager comes with a variety of monitoring and diagnostics options that maintains the integrity and performance of web applications hosted on IIS. IIS Manager helps trace failed requests and enable logging to help administrators efficiently manage server health, troubleshoot issues, and optimize performance.
Enabling filtering and IP restrictions: IIS Manager lets you configure settings to restrict access to your organization's website and critical servers. By setting up rules with the IIS Manager, you can deny specific HTTP verbs, query strings, or URL segments that might be detrimental for your server. You can also place restrictions on the content in your web servers' sites, applications, and files.
Setting up security configuration: IIS Manager enables administrator to configure security settings such as authentication methods to authenticate users with NTLM or Kerberos, authorizing the URLs in your server, and implementing SSL settings for secure connections.
Remote administration: IIS Manager supports remote administration over HTTPS, allowing administrators to securely manage web servers from different locations. You can also configure which port the remote administration service runs on, and which certificate should be used to enable SSL encryption.
How do you open IIS Manager?
To open and access IIS Manager, you can use various methods depending on your operating system and preferences. Let's explore the different methods.
- Using the Run dialog
- Using the Start menu
- Using the Task Manager
- Using the Control Panel
- Using Command Prompt
- Using Windows PowerShell
Using the Run dialog
- Press Windows + R to open the Run dialog.
- Type inetmgr and press enter. This will launch IIS Manager directly.

Using the Start menu
- Click on the Start menu.
- Type IIS in the search bar.
- From the search results, select Internet Information Services (IIS) Manager.

Using the Task Manager
- Search for Task Manager in the Start menu.
- In the Task Manager, click on the File menu at the top left corner.
- Select Run new task from the drop-down menu.
- In the dialog box that appears, type inetmgr and click OK. This should open IIS Manager.

Using the Control Panel
- Click on the Start menu.
- Type Control Panel and select it from the search results.
- In the Control Panel, click on System and Security. Then, click on Administrative Tools.
- In the Administrative Tools window, double-click on Internet Information Services (IIS) Manager to open it.

Using Command Prompt
- Open Command Prompt.
- Type %SystemRoot%\System32\inetsrv\inetmgr.exe and press Enter.
Using PowerShell
- You can also start IIS Manager from PowerShell by typing inetmgr and pressing Enter.
By using any of these methods, you can easily launch IIS Manager.
When should you use IIS Manager?
IIS Manager helps manage IIS servers and monitor its health and performance. Here are some of the benefits of using IIS Manager:
- Application pool: An IIS Application Pool is an integral component of IIS. It groups one or more web applications, and lets you isolate them. So, if one application fails, it does not affect others running on the same server, enhancing overall stability.
- Performance optimization: IIS Manager supports dynamic caching and compression, which improves load times and reduces bandwidth usage. This is particularly beneficial for websites with high traffic volumes.
- Centralized management: IIS Manager provides a single interface to manage multiple websites and applications, simplifying administrative tasks an d ensuring e fficient oversight of server resources.
- Logging: IIS Manager allows for detailed logging of all requests processed by your web server. This includes information such as IP addresses, response codes, timestamps, and choosing the format in which the logs are to be recorded. Additionally, there is an option to configure your log files to roll over based on a specific schedule or when they reach a certain size.
- Scalability: Application request routing (ARR) in IIS Manager is designed to handle high volumes of requests seamlessly. It supports HTTP-based load balancing and intelligent request routing, making it suitable for enterprise-level applications.
- Support for multiple technologies: IIS Manager can host a variety of applications, including those built with ASP.NET and PHP. This flexibility allows organizations to use different technologies on the same server.
Solving security challenges with IIS Manager
IIS Manager plays a key role in ensuring the security of IIS web servers through its various capabilities. Let's check out some of its use cases in detail here:
Defending against malicious traffic with request filtering
Request filtering enables you to configure rules to evade unsolicited or any harmful requests that would potentially threaten your web servers' performance. Cybercriminals have found many ways to exploit critical resources, and this requires IT teams to take uncompromised efforts to enhance security measures for their organization.
SQL injection is one of the methods attackers have come up with to execute malicious SQL statements. By executing these statements, the attackers gain control of the database server behind a web application.
Here are the steps to follow to prevent SQL injections with request filtering:
- In IIS Manager, select the Request Filtering module.
- Once opened, choose the URL icon followed by clicking on Deny Sequence in the Actions section.
- Enter common SQL injection keywords or patterns that you want to block. For instance, you can add "varchar", "exec", "select", "insert", and "drop".
- Each of these terms can be added individually to ensure that requests containing them are denied, which will return an HTTP Error 404.5 – Not Found message for those requests.
The request filtering feature can also block requests based on parameters such as file extensions, URLs, HTTP verbs, and URL length.
Detect log anomalies and stop sophisticated attacks at early stages
IIS Manager logs information about every request made to the server, including the source IP address, requested URLs, HTTP methods, and response status codes. This data helps administrators understand how users interact with the web application.
Here are the steps to set up logging in IIS Manager:
- Open IIS Manager.
- In the left-hand connections pane, expand the server node and select the website or application for which you want to enable logging.
- In the feature view, double-click on the Logging icon.
- In the Logging settings, you can configure various formats: IIS, WSC, and NCSA.
- Click on the Select Fields to choose which fields you want to include in your logs. Commonly used fields include: Date, Time, Username, Client IP address, and HTTP status code.
- Configure how often log files should roll over (for example, daily, weekly, or when they reach a certain size). This helps manage disk space and makes it easier to analyze logs over time.
- After configuring your settings, click Apply in the Actions pane to save your changes.
Reviewing these logs can unveil unusual access patterns, such as a high number of requests from a single IP address or attempts to access restricted resources. These anomalies might indicate potential security threats like DDoS attacks or unauthorized access attempts.
Preventing DDoS attack using dynamic IP restriction
This module in IIS Manager helps thwart DDoS attacks. Dynamic IP address filtering allows administrators to configure the server to block access for IPs that exceed the specified request threshold. Here's how you can set up dynamic IP restrictions in IIS:
- Open IIS Manager.
- In the left-hand connections pane, select the website you want to protect.
- Double-click on the IP Address and Domain Restrictions icon in the feature view.
- In the Actions pane, click on Edit Dynamic Restriction Settings.
- In the Dynamic IP Restriction Settings dialog box, you can set parameters for blocking IP addresses based on the number of requests over a period of time.
This approach helps maintain server availability and performance during potential attack scenarios, allowing legitimate users continued access while blocking malicious traffic.
How ManageEngine EventLog Analyzer complements Microsoft IIS Manager using its end-to-end capabilities
Eventlog Analyzer is a comprehensive log management tool that collects, monitors, and archives logs centrally from IIS servers among others. It's a one-stop solution for your organization to troubleshoot errors, fortify your security posture, and help you stay compliant with the mandates. It features exclusive reports on more than 50 key IIS metrics, including HTTP status codes, password changes and where it stemmed from, availability of your server, and more .
While IIS Manager lets administrators deploy applications to an IIS server, the installation of a centralized log management tool like EventLog Analyzer is crucial for administrators to enhance the overall security posture to protect those servers. It provides out-of-the-box reports, helps in auditing your IIS web server events, and analyzes so you can quickly pinpoint the origin of suspicious activities.
EventLog Analyzer uses its threat intelligence to keep tabs on specific users to analyze their behavioural patterns. With this, you'd instantly get notified of alerts when someone logs on outside their normal hours and add to your vigil by monitoring activities like changing access permissions and tampering with sensitive data. This way, you can thwart malicious contact attempts, SQL injection, and DDoS attacks at earlier stages.
You can also configure EventLog Analyzer to alert you when IIS runs into health and performance issues. For instance, you can set an alert to track data from your IIS logs when the number of failed requests (HTTP status codes like 500) exceeds a threshold within a specific time frame. This feature helps you proactively monitor IIS performance and address potential issues before they impact users.

EventLog Analyzer also comes with predefined compliance reports for regulations suc h as HIPAA, PCI DSS, SOX , and the GDPR. This feature is essential for auditing IIS for compliance to ensure the security and integrity of your web server.