How To Configure COM Internet Services (CIS) on the Server Side (282261)


The information in this article applies to:

  • Microsoft COM, when used with:
    • the operating system: Microsoft Windows 2000
    • the operating system: Microsoft Windows NT 4.0
This article was previously published under Q282261

SUMMARY

This article describes how to configure Microsoft COM Internet Services (CIS) on a Windows 2000 or a Windows NT 4.0 server. This article is divided into the following sections:

MORE INFORMATION

CIS Preconditions

  • Do not install CIS on a computer that is running Microsoft Proxy Server.
  • Do not enable TCP/IP filtering on TCP ports on the server computer.
  • If the CIS server is behind a firewall, only open port 80 in the firewall for TCP protocol.
  • Do not apply the DCOMCNFG settings to configure the dynamic port ranges to Tunneling TCP/IP.

CIS Requirements on a Windows NT 4.0 Server

  • Make sure that the Windows NT 4.0 Option Pack is installed.
  • Make sure that Windows NT 4.0 Service Pack 4 (SP4) or later is installed.
  • Make sure that Internet Information Server (IIS) 4.0 (including the Internet Service Manager) is running.

    Note IIS 4.0 is part of Windows NT 4.0 Option Pack.

CIS Requirement on a Windows 2000 Server

  • Make sure that Internet Information Server (including the Internet Service Manager) is running.

Steps to Configure RPC Proxy on Windows NT 4.0 Server

  1. Create an RPC subfolder under your Inetpub folder. For example, at a command prompt, type the following command:

    md c:\inetpub\rpc

    The following instructions refer to this folder as %Inetpub%\Rpc.
  2. Copy Rpcproxy.dll from the Windows system directory to %Inetpub%\Rpc. For example, at the command prompt, type the following command:

    copy %windir%\system32\rpcproxy.dll c:\inetpub\rpc

  3. If Rpcproxy.dll is on an NTFS drive, make sure that you allow at least "execute" permissions on Rpcproxy.dll for the account that IIS uses for anonymous access.
  4. Create a virtual root for the folder that you created in step 1 as follows:
    1. On the Start menu, point to Programs, point to Windows NT 4.0 Option Pack, point to Microsoft Internet Information Server, and then click Internet Server Manager.
    2. In the console tree in the left pane, click Console Root/IIS/<computer name>/Default Web Site.
    3. Right-click Default Web Site, click Create New, and then click Virtual Directory.
    4. In the New Virtual Directory Wizard, enter the following data:

      Alias to be used to access virtual directory: RPC
      Physical path: %Inetpub%\Rpc
      Permissions: Execute Access

    5. Make sure that the folder is configured to allow anonymous access.
  5. Do not close Internet Service Manager. Change the connection timeout for the default Web site to 5 minutes as follows:
    1. In the console tree in the left pane, click Console Root/IIS/<computer name>/Default Web Site.
    2. Right-click Default Web Site, and then click Properties.
    3. In the Default Web Site Properties dialog box, on the Web Site tab, change the Connection Timeout to 300, and then click OK.
  6. Do not close Internet Service Manager. Install the RPC Proxy Internet Server Application Programming Interface (ISAPI) filter as follows:
    1. In the console tree in the left pane, click Console Root/IIS/<computer name>.
    2. Right-click the computer name, and then click Properties.
    3. In the Master WWW Service Properties dialog box, click Edit. On the ISAPI Filters tab, click Add, and then enter the following data:

      Filter name: Rpcproxy
      Executable: %Inetput%\Rpc\Rpcproxy.dll

  7. Click OK, and then click Apply. Close Internet Service Manager.
  8. At a command prompt, type the following commands to stop and restart the Internet Information Server:

    net stop iisadmin

    net start w3svc

  9. Proceed to Steps to Enable CIS on Both Servers.

Steps to Configure RPC Proxy on Windows 2000 Server

Note When you upgrade from a Windows NT 4.0 SP4 Server (in which CIS is already installed) to Windows 2000, you must use the following steps to reinstall CIS.

On a Windows 2000 Server, CIS is installed from an optional network setup and is not installed by default. You can install CIS during the initial Windows 2000 server installation or add it later to an existing system as follows:
  1. In Control Panel, click Add/Remove Programs, and then click Add/Remove Windows Components.
  2. In the Windows Components Wizard, select the Networking Services check box, and then click Details.
  3. Select the COM Internet Services Proxy check box, and then click OK to exit the Windows Components Wizard.
  4. Proceed to Steps to Enable CIS on Both Servers.

Steps to Enable CIS on Both Servers

To enable CIS on the Windows NT 4.0 or Windows 2000 server, you must add the Tunneling TCP protocol to the DCOM protocol list. In addition, you can change the value of a DCOM property to control whether CIS is enabled (by default, it is "disabled"). This setting can act as a coarse-grained security control to disable potential Internet access to DCOM. Note, however, that even when CIS is enabled, the usual DCOM security checks remain in effect.

To add the Tunneling TCP protocol to the DCOM protocol list and to change the value of the DCOM property, run DCOMCNFG as follows:
  1. On the Start menu, click Run, and type DCOMCNFG.
  2. On the Default Properties tab, select the Enable COM Internet Services on this computer check box.
  3. On the Default Protocols tab, click Add.
  4. In the resultant dialog box, click Tunneling TCP/IP, and then click OK.
  5. Click OK to close DCOMCNFG.
  6. Restart the system so that the changes take effect.

REFERENCES

For more information about CIS and for an overview of Tunneling TCP Protocol, refer to the following Microsoft white paper:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dndcom/html/cis.asp

For additional information, click the article numbers below to view the articles in the Microsoft Knowledge Base:

265340 How To Configure COM Internet Services (CIS) on the Client Side

234230 PRB: Component Services Administrative Tool Incorrectly Allows Property Editing for Tunneling TCP/IP Protocol

Modification Type:MinorLast Reviewed:8/30/2004
Keywords:kbDCOM kbhowto KB282261
©2004 Microsoft Corporation. All rights reserved.