|
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0//EN" "http://www.w3.org/TR/REC-html40/strict.dtd"><HTML DIR="LTR"><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text-html;charset=Windows-1252">
<TITLE>Compatibility Details</TITLE></HEAD>
<BODY BGCOLOR="#ffffff"><FONT FACE="verdana" SIZE="2">
<h3>IIS World Wide Web Publishing Service (WWW service) Is Disabled During Upgrade</h3>
<P>To protect your server from attacks by malicious users, the World Wide Web Publishing Service (WWW service) will be disabled during upgrade. Microsoft® Windows® 2000 Server installs Internet Information Services (IIS) by default, and requires administrators to secure IIS to prevent attacks.</P>
<P>The IIS Lockdown Tool has not been run on this Windows 2000 server. If you do not want to allow the WWW service to be disabled, you must download and run the IIS Lockdown Tool, or add the override registry key. Otherwise, you can continue with the upgrade and re-enable the WWW service after the upgrade has completed.</P>
<P><B>Important:</B> If you use the World Wide Web Publishing Service (WWW service), we strongly recommend that you run the IIS Lockdown Tool before upgrading to a product in the Windows Server 2003 family. The IIS Lockdown Tool will help secure your computer by disabling or removing unnecessary features that are present in your Windows 2000 Server installation. These features would otherwise have remained on your machine after upgrading, leaving your server vulnerable to attacks. Using the IIS Lockdown Tool instead of using the override registry key or re-enabling the WWW service after installation allows you to fine-tune the level of security to your particular needs.</P>
<P><B>When upgrading to a member of the Windows Server 2003 family, the WWW service will NOT be disabled if any of the following conditions are present:</B></P><UL><LI>You have already run the IIS Lockdown Tool on your Windows 2000 Server before starting the upgrade process. The IIS Lockdown Tool reduces surface attack by disabling unnecessary features, and it allows you to decide which features to enable for your site. The IIS Lockdown Tool is available at IIS Lockdown Tool (http://go.microsoft.com/fwlink/?LinkId=8599). </LI><LI>The registry key <B>RetainW3SVCStatus</B> has been added to the registry under <B>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC</B>. Under <B>RetainW3SVCStatus</B> you can add any value and then assign a DWORD value to it. For example, you can create the key <B>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\RetainW3SVCStatus\do_not_disable</B> with the DWORD value of 1. </LI><LI>In the unattended install case, an entry "<i><B>DisableWebServiceOnUpgrade</B></i> = false" exists in the unattended install script. </LI></UL>
<P>After the upgrade is completed, you can enable the WWW service using either IIS Manager or the Services snap-in.</P>
<P><B>To start the World Wide Web Publishing Service after upgrade</B></P><P><B>In IIS Manager:</B></P><OL><LI>From the <B>Start</B> menu, point to <B>Administrative Tools</B>, and then click <B>Internet Information Services (IIS) Manager</B>.</LI><LI>Expand the local computer, and then expand the <B>Web Sites</B> folder.</LI><LI>Right-click the Web site you want to start, and then click <B>Start</B>.</LI><LI>Click <B>Yes</B> to enable the WWW service and start the Web site.</LI></OL>
<P><B>In the Services snap-in:</B></P><OL><LI>Click <B>Start</B>, point to <B>Administrative Tools</B>, and then click <B>Services</B>.</LI><LI>In the list of services, right-click <B>World Wide Web Publishing Service</B>, and then click <B>Properties</B>.</LI><LI>On the <B>General</B> tab, in the <B>Startup type</B> list, click <B>Automatic</B>, and then click <B>OK</B>.</LI><LI>In the list of services, right-click <B>World Wide Web Publishing Service</B>, and then click <B>Start</B>.</LI></OL>
</FONT></BODY></HTML>
|
