修改IIS默认配置以允许SCCM后台传输某种扩展名的文件
2013-07-18 09:13
316 查看
Configure requestFiltering for IIS on distribution points
The following information applies when you use distribution points that are enabled for Allow clients to transfer content from this distribution point using BITS, HTTP, and HTTPS.By default, IIS blocks several file extensions and folder locations. If package source files contain extensions that are blocked in IIS, you must configure the requestFiltering section in the applicationHost.config file on a distribution points that is enabled for Allow clients to transfer content from this distribution point using BITS, HTTP, and HTTPS.
For example, you might have source files for a software deployment that include a folder named bin, or that contain a file with the .mdb file extension. By default, IIS request filtering blocks access to these elements. When you use the default IIS configuration on a distribution point, clients that use BITS fail to download this software deployment from the distribution point. In this scenario, the clients indicate that they are waiting for content. To enable the clients to download this content by using BITS, on each applicable distribution point, edit the requestFiltering section of the applicationHost.config file to allow access to the files and folders in the software deployment.
![](http://i.technet.microsoft.com/areas/global/content/clear.gif)
Important
When you enable WebDAV and modify the requestFiltering section of the applicationHost.config file for the Web site, this increases the attack surface of the computer. Enable WebDAV only when required for management points and distribution points that are enabled forAllow clients to transfer content from this distribution point using BITS, HTTP, and HTTPS. If you enable WebDAV on the default Web site, it is enabled for all applications that use the default Web site. If you modify the requestFiltering section, it is modified for all Web sites on that server. The security best practice is to run Configuration Manager 2007 on a dedicated Web server. If you must run other applications on the Web server, use a custom Web site for Configuration Manager 2007. For more information, see Best Practices for Securing Site Systems.
Use the following procedure to modify requestFiltering for Windows Server 2008 and Windows Server 2008 R2.
Open the applicationHost.config file located in the %Windir%\System32\Inetsrv\Config\ directory on distribution points that are enabled for Allow clients to transfer content from this distribution point using BITS, HTTP, and HTTPS.
Search for the <requestFiltering> section.
Determine the file name extensions and folder names that you will have in the packages on that distribution point. For each extension and folder name that you require, perform the following steps: If it is listed as a fileExtension element, set the value for allowed to true.
For example, if your package contains a file with an .mdb extension, change the line true to allowed<add fileExtension=".mdb" allowed="false" /> to <add fileExtension=".mdb" allowed="true" />.
Allow only the file name extensions required for your packages.
If it is listed as a <hiddenSegments> element, delete the entry that matches the file name extension or folder name from the file.
For example, if your package contains a folder with the label of bin, remove the line <add segment=”bin” /> from the file.
Save and close the applicationHost.config file.
相关文章推荐
- 图解修改IIS web.config配置文件增设置默认文档的方法
- iis配置:win2012/2008/2003+IIS8.5/7.5/6.0上传文件大小限制的修改方法
- Win7 : 如何修改某种文件的默认打开方式
- JM代码修改默认配置文件.config
- 【asp】如何打开asp文件,包括IIS安装,HTTP错误403.14,配置默认文档,启用目录浏览
- Linux默认允许单进程打开文件数量限制测试与修改方法
- Struts2中default.properties常量默认配置文件详解,以及修改常量方式
- spring boot打包成war包部署及修改默认配置文件的名称
- mysql my.ini配置文件修改无效,修改mysql默认字符集
- 修改Apache配置文件开启gzip压缩传输
- maven配置文件中修改默认jdk
- 利用配置文件修改IIS使用的最大虚拟内存和自动回收时间
- linux -- ubuntuserver 安装Apache后,修改默认目录和分布式配置文件可执行
- IIS和Apache配置文件默认路径
- 修改配置文件使Netbeans默认使用UTF-8编码
- 通过配置文件来修改eclipse的默认编码
- 在后台里修改配置文件(web.config)
- 修改linux系统配置文件 /etc/inittab 默认从字符界面启动系统
- 修改IIS默认上传、下载文件大小的限制
- 配置文件里修改session默认时间