Been working on various web server build script for IIS7 in Powershell

most of it was VERY easy and more then wel document on the internet, but managing the ASP.NET trusts, but editing the .net web.config file was a bit more tricky

by glueing some code from here and here i managed to create the follwing code

Which assign FULL trust for web site ID 2 for 64 bit V2 .net framework, i am sure anyone can now tweak to suite there own requirements

$webConfigPath = “C:\Windows\Microsoft.NET\Framework64\v2.0.50727\CONFIG\web.config”
$currentDate = (get-date).tostring(“mm_dd_yyyy-hh_mm_s”) # month_day_year – hours_mins_seconds
$backup = $webConfigPath + “_$currentDate
# Get the content of the config file and cast it to XML and save a backup copy labeled .bak followed by the date
$xml = [xml](get-content $webConfigPath)
#save a backup copy 
$xml.Save($backup)
#this was the trick I had been looking for
$root = $xml.get_DocumentElement();
#add node for automation web site
$newlocation = $xml.CreateElement(“location”)
$newlocation.SetAttribute(“Path”, “2″)
$newlocation.SetAttribute(“allowOverride”, “false”)
$newlocation.set_InnerXML(“<system.web><trust level=”"Full”" originUrl=”"”" /></system.web>”)
$root.AppendChild($newlocation)
# Save it 
$xml.Save($webConfigPath)

Just found a .NET twitter api class, i can feel some automated twittering comming on http://is.gd/3a9X

Carrying on from my IIS admin via a web service work, i needed to apply IPSecurity restrictions to some of the sites that would be created.

Plently of googling revealed some information about an IISIPSecurity class in .NET 3.0 and above, but i could only rough c# sample code here , and that was for a console app

so after many failed attempts to convert to VB.NET to work with my web service, and even tried the ADSIIIS.dll com interop, i gave up and converted the c# code into an assembly , which works. I know hind sight is 20:20, but i shodul have just done that in the first place

my code is here

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.DirectoryServices;
using System.Reflection;
namespace IISSecurity
{
public class IISIPSecurity
{
static string SetIPSecurityProperty(string metabasePath, string member, string item)
{// metabasePath is of the form “IIS://<servername>/<path>”
// for example “IIS://localhost/SMTPSVC/1″
// member is of the form “IPGrant|IPDeny|DomainGrant|DomainDeny”
// item is of the form “<ipaddress|domain>”, for example, 157.56.236.15 or domain.microsoft.com try
{
if ((“IPGrant” != member) && (“IPDeny” != member) && (“DomainGrant” != member) && (“DomainDeny” != member))
{
 return “Failed in SetIPSecurityProperty; second param must be one of IPGrant|IPDeny|DomainGrant|DomainDeny”;
}else{
 DirectoryEntry path = new DirectoryEntry(metabasePath);
 path.RefreshCache();
 object ipsecObj = path.Invoke(“Get”, new string[] { “IPSecurity” });
 Type t = ipsecObj.GetType();
 Array data = (Array)t.InvokeMember(member, BindingFlags.GetProperty, null, ipsecObj, null);
 bool exists = false;
 foreach (object dataItem in data)
 {
if (dataItem.ToString().StartsWith(item))
 {
 exists = true;
 }
}
if (exists)
{
 return “Not appling already exists”;
}
 else
{
 object[] newData = new object[data.Length + 1];
 data.CopyTo(newData, 0);
 newData.SetValue(item, data.Length);
 t.InvokeMember(member, BindingFlags.SetProperty, null, ipsecObj, new object[] { newData });
 path.Invoke(“Put”, new object[] { “IPSecurity”, ipsecObj });
 path.CommitChanges();
 path.RefreshCache();
 ipsecObj = path.Invoke(“Get”, new string[] { “IPSecurity” });
 data = (Array)t.InvokeMember(member, BindingFlags.GetProperty, null, ipsecObj, null);
 }
 return “OK”;
}
}
catch (Exception ex)
{
 return ex.Message;
}
}
}
}

For the Past week or so I have been developing a series of webservices to Manage IIS setting on a Large web cluster as single entity, and for days i have been bettling with a Unknown error (0×80005000). Plenty of Googling and MSDN Searching all talked about permisions issues. But most of the code worked on the target web server, just not on my laptop under Visual Studio

So i chucked a
System.Security.Principal.WindowsIdentity.GetCurrent().Name
Into my code and confirmed the USER ID is all correct.

So after a few head aches and some desk thumping, I closed visual Studio and reverted to first principles.

I started up compmgmt.msc and tried to connect to my target web server,  when i notice the web server snap in was not present. having now installed the IIS admin tools on my XP laptop,

Now it all works perfectly