Powershell script to verify IIS Settings

Question

Is it to possible to get IIS settings using Power Shell Script?

I am looking to get/check below information using a a script:

Check if Windows Authentication Providers are listed correctly (Negotiate, NTLM)
Check if Windows Authentication is enabled
Windows Authentication Advanced Settings -> enable kernel-mode is on

Aage · Accepted Answer · 2018-03-19 15:06:59Z

6

Yes, that is all easily possible with PowerShell. There are lots of samples and examples online.

Look at the (IIS) Administration Cmdlets in Windows PowerShell and especially Get-WebConfiguration and Get-WebConfigurationProperty.

To get information about the Windows Authentication Advanced Settings use:

$windowsAuthFilter = "/system.WebServer/security/authentication/windowsAuthentication"
$winKernel = (Get-WebConfigurationProperty -pspath 'MACHINE/WEBROOT/APPHOST' -location 'Default Web Site' -filter "$windowsAuthFilter" -name "useKernelMode").Value
$winKernel 
$winProviders = Get-WebConfigurationProperty -pspath 'MACHINE/WEBROOT/APPHOST' -location 'Default Web Site' -filter "$windowsAuthFilter/providers" -name "." 
$winProviders.Collection | Format-Table value

edited Mar 19, 2018 at 15:06

Aage

6,3402 gold badges38 silver badges59 bronze badges

answered Aug 2, 2016 at 14:23

Peter Hahndorf

11.4k5 gold badges45 silver badges58 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Joseph Over a year ago

Tried: Import-Module WebAdministration cd IIS: IIS:\>Get-WebConfiguration -Filter "System.WebServer/Security/Authentication/* /*" -Recurse | where {$_.enabled -eq $True} | Format-List ' But get an error as below: IIS:\>Get-WebConfiguration : The term 'IIS:\>Get-WebConfiguration' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.

Peter Hahndorf Over a year ago

Run Enable-WindowsOptionalFeature -Online -FeatureName IIS-WebServerManagementTools to install the IIS cmdlets, if you have an older Windows version, installed them via the GUI.

Joseph Over a year ago

The below code runs fine but in the output it doesn't shows if Windows Authentication is enabled or not for IIS: Get-WebConfiguration system.webServer/security/authentication/windowsAuthentication/* 'IIS:\sites\Default Web Site' -Recurse | format-list

Joseph · Accepted Answer · 2016-08-03 14:02:20Z

1

Below is the answer to read anonymous and windows authentication:

$anonAuthFilter =    "/system.WebServer/security/authentication/AnonymousAuthentication"
$windowsAuthFilter = "/system.WebServer/security/authentication/windowsAuthentication"

$value = 'false'
$AppName = "test"

$anonAuth = Get-WebConfigurationProperty -filter $anonAuthFilter -name Enabled -location $AppName
Write-Host  $anonAuth.Value


$winAuth = Get-WebConfigurationProperty -filter $windowsAuthFilter -name Enabled -location $AppName
Write-Host  $winAuth.Value

@Peter Hahndorf Still didn't find any clue for

Check Windows Authentication Advanced Settings -> enable kernel-mode is on and

Check check Enabled Providers like NTLM and Negotiate

edited Aug 3, 2016 at 14:02

answered Aug 3, 2016 at 13:53

Joseph

5905 gold badges20 silver badges42 bronze badges

Collectives™ on Stack Overflow

Powershell script to verify IIS Settings

2 Answers 2

3 Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

3 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related