Merge pull request #53949 from MicrosoftDocs/NEW-deploy-internet-information-services

New deploy internet information services

Author: Carolyn135

learn-pr/advocates/deploy-configure-internet-information-services/1-introduction-internet-information-windows-server.yml

@@ -0,0 +1,13 @@
+### YamlMime:ModuleUnit
+uid: learn.devrel.deploy-configure-internet-information-services.introduction-internet-information-windows-server
+title: Introduction to Internet Information Services on Windows Server
+metadata:
+  title: Introduction to Internet Information Services on Windows Server
+  description: In this unit, you'll be introduced to Internet Information Services (IIS) on Windows Server. You learn about the architecture of IIS, its components, and the benefits of using IIS as a web server for hosting websites and web applications.
+  ms.date: 03/23/2026
+  author: Orin-Thomas
+  ms.author: orthomas
+  ms.topic: unit
+durationInMinutes: 4
+content: |
+  [!include[](includes/1-introduction-internet-information-windows-server.md)]

learn-pr/advocates/deploy-configure-internet-information-services/2-install-web-server-role.yml

@@ -0,0 +1,13 @@
+### YamlMime:ModuleUnit
+uid: learn.devrel.deploy-configure-internet-information-services.install-web-server-role
+title: Installing the Internet Information Services web server role
+metadata:
+  title: Installing the Internet Information Services Web Server role
+  description: Learn how to install the Internet Information Services (IIS) web server role on Windows Server using both the graphical user interface (GUI) and PowerShell command-line interface.
+  ms.date: 03/23/2026
+  author: Orin-Thomas
+  ms.author: orthomas
+  ms.topic: unit
+durationInMinutes: 5
+content: |
+  [!include[](includes/2-install-web-server-role.md)]

learn-pr/advocates/deploy-configure-internet-information-services/3-initial-configure-validate.yml

@@ -0,0 +1,13 @@
+### YamlMime:ModuleUnit
+uid: learn.devrel.deploy-configure-internet-information-services.initial-configure-validate
+title: Initial configuration and validation
+metadata:
+  title: Initial Configuration and Validation
+  description: In this unit, you perform the initial configuration of your web server and validate that the installation was successful. You learn how to use the IIS Manager console to perform basic configuration tasks, such as creating a new website and configuring its settings.
+  ms.date: 03/23/2026
+  author: Orin-Thomas
+  ms.author: orthomas
+  ms.topic: unit
+durationInMinutes: 7
+content: |
+  [!include[](includes/3-initial-configure-validate.md)]

learn-pr/advocates/deploy-configure-internet-information-services/4-knowledge-check.yml

@@ -0,0 +1,54 @@
+### YamlMime:ModuleUnit
+uid: learn.devrel.deploy-configure-internet-information-services.knowledge-check
+title: Knowledge check
+metadata:
+  title: Knowledge Check
+  description: Check your knowledge.
+  ms.date: 03/23/2026
+  author: Orin-Thomas
+  ms.author: orthomas
+  ms.topic: unit
+durationInMinutes: 3
+content: |
+quiz:
+  title: Check your knowledge
+  questions:
+    - content: Where is the content root of the Default Web Site on a new IIS installation?
+      choices:
+        - content: C:\wwwroot\
+          isCorrect: false
+          explanation: Incorrect. This path doesn't exist by default; the correct path includes the "inetpub" directory.
+        - content: C:\inetpub\wwwroot\
+          isCorrect: true
+          explanation: Correct! The Default Web Site's content root is C:\inetpub\wwwroot, where the default welcome file iisstart.htm is located.
+        - content: "%SystemDrive%\\Web\\Default Site\\"
+          isCorrect: false
+          explanation: Incorrect. This is not a valid default IIS path.
+        - content: C:\Program Files\IIS\Default\
+          isCorrect: false
+          explanation: Incorrect. IIS doesn't store website content under Program Files.
+    - content: Which of the following is one of the default document file names for IIS?
+      choices:
+        - content: Default.js
+          isCorrect: false
+          explanation: Incorrect. Default.js isn't in the IIS default document list.
+        - content: index.md
+          isCorrect: false
+          explanation: Incorrect. index.md isn't in the IIS default document list.
+        - content: home.aspx
+          isCorrect: false
+          explanation: Incorrect. home.aspx isn't in the default IIS document list.
+        - content: iisstart.htm
+          isCorrect: true
+          explanation: Correct! iisstart.htm is in the IIS default document list.
+    - content: Which firewall port must be open to allow users to access a website on HTTP, and which additional port is needed for HTTPS?
+      choices:
+        - content: Port 80 for HTTP, and port 443 for HTTPS
+          isCorrect: true
+          explanation: Correct! Port 80 is the standard HTTP port; port 443 is the standard HTTPS port. Both must be open for users to access IIS-hosted websites.
+        - content: Port 443 for HTTP, and port 80 for HTTPS
+          isCorrect: false
+          explanation: Incorrect. These are reversed. Port 80 is HTTP, port 443 is HTTPS.
+        - content: Port 25 for HTTP, and port 110 for HTTPS
+          isCorrect: false
+          explanation: Incorrect. Port 25 is SMTP email; port 110 is POP3 email. Neither is used for web hosting.

learn-pr/advocates/deploy-configure-internet-information-services/5-summary.yml

@@ -0,0 +1,13 @@
+### YamlMime:ModuleUnit
+uid: learn.devrel.deploy-configure-internet-information-services.summary
+title: Summary
+metadata:
+  title: Summary
+  description: Module summary and key takeaways.
+  ms.date: 03/23/2026
+  author: Orin-Thomas
+  ms.author: orthomas
+  ms.topic: unit
+durationInMinutes: 2
+content: |
+  [!include[](includes/5-summary.md)]

learn-pr/advocates/deploy-configure-internet-information-services/includes/1-introduction-internet-information-windows-server.md

@@ -0,0 +1,17 @@
+Windows Server includes IIS (Internet Information Services) version 10.0 as the built-in web server role. IIS isn't installed by default in a fresh Windows Server 2025 installation. You can add it via Server Manager or PowerShell. IIS 10 is available in all supported versions of Windows Server and Windows Client.
+
+IIS uses a modular hierarchical architecture. The main architectural components are:
+
+- **Web Sites**. Top-level containers that represent individual websites hosted on the server. Each site is identified by a unique combination of host name, port, and IP address and has its own folder path for content. By default, when IIS is installed, it creates a "Default Web Site", which listens on HTTP port 80 and serves content the %SystemDrive%\inetpub\wwwroot folder.
+- **Applications**. An application in IIS is a subset of a site that runs as a distinct unit. Applications are configured starting at a virtual directory and have their own settings or even a separate application pool. For example, under one site you might have a "/Blog" application that has its own configuration or credentials. 
+- **Virtual Directories**. A virtual directory is a logical directory name within a site or application that maps to a physical folder on disk. This folder can be outside the site's root folder. Virtual directories let you publish content or files in IIS from different file system locations under a single site structure. They appear as normal subfolders to users. 
+- **Application Pools**. An application pool is the worker process environment in which one or more sites/applications run. Application pools provide isolation—each pool runs in its own sandboxed worker process named w3wp.exe. This means that problems in one site won't impact other sites hosted on the same server. By default, IIS puts the "Default Web Site" into a default application pool (DefaultAppPool). You should create additional application pools to isolate different applications or sites. Key settings of app pools include the .NET CLR version for ASP.NET apps, pipeline mode, and various recycling settings for stability. Each website in IIS can be assigned to a different application pool.
+- **Modules**. Modules are components that handle specific request-processing tasks including authentication, compression, and URL rewriting. IIS's modular architecture means you can add or remove modules depending on the features you need.
+
+These components function as follows:
+
+1. When a request arrives, IIS determines which site it's for by matching the host header, port, and IP to a site binding. 
+1. Within that site, it looks at the URL path to see if it corresponds to an application or virtual directory with distinct settings, then maps the request to a physical folder. 
+1. The request is executed using the application pool associated with that site/application, which loads the necessary modules to handle things like authentication, authorization, serving content or executing application code, and sending the response.
+
+[![A diagram showing IIS architecture functions with incoming requests.](../media/internet-information-services-architecture.png)](../media/internet-information-services-architecture.png#lightbox)

learn-pr/advocates/deploy-configure-internet-information-services/includes/2-install-web-server-role.md

@@ -0,0 +1,61 @@
+On a computer configured as Windows Server 2025 with Desktop Experience, you can install IIS using the Add Roles and Features Wizard:
+
+1. In Server Manager's dashboard, select "Add Roles and Features." This opens the Add Roles and Features Wizard.
+1. In the wizard's Before you begin page, select Next. Choose "Role-based or feature-based installation," then select your server. Continue to the Server Roles step.
+1. In the list of roles, find and check "Web Server (IIS)". If this is the first time installing IIS, a pop-up appears to add associated features. Select "Add Features" when prompted to include IIS Management Console and other required components. After that, the "Web Server (IIS)" role should be checked.
+[![A screenshot showing selection of the Web Server role.](../media/server-manager-install.png)](../media/server-manager-install.png#lightbox)
+1. Select Next to go through features until you reach the Role Services page. This list displays subcomponents like Common HTTP Features, Security, and Performance. By default, essential services are preselected. You can optionally select additional services or add them later as required. [![A screenshot showing selection Web Server role services.](../media/server-manager-roles.png)](../media/server-manager-roles.png#lightbox)
+1. Complete the wizard and then select Install on the confirmation page. The installation proceeds and when it completes, you'll see an "Installation succeeded" message.
+
+> [!NOTE]
+> By default, installing IIS through the wizard enables the Default Web Site on port 80. If you want to quickly verify that IIS works, you can open a web browser on the server and navigate to http://localhost. You should be greeted by the IIS welcome page, indicating the web server is running.
+
+## PowerShell installation
+
+To install IIS via PowerShell in Windows Server, use the Install-WindowsFeature cmdlet from an elevated command prompt:
+
+```powershell
+Install-WindowsFeature Web-Server -IncludeManagementTools
+```
+
+You can install specific IIS subcomponents by name using PowerShell. For example, to install IIS with some common features, you might specify component names like Web-WebSockets or Web-Dyn-Compression. You can see the available web server features by running the command:
+
+```powershell
+Get-WindowsFeature -Name Web*
+```
+
+You can determine which IIS features are installed by running the command: 
+
+```powershell
+Get-WindowsFeature -Name Web* | Where Installed
+```
+
+## IIS on Server Core
+
+Server Core is the minimal, GUI-less installation option for Windows Server. The Server Core installation option is appropriate for workloads like IIS as the minimal number of components reduces the server's attack surface. You can deploy IIS on Server Core, but you can't use the local IIS Manager application. You can install IIS on Server Core using PowerShell using Install-WindowsFeature or remotely using Server Manager.
+
+To enable remote management, you need to install the Web Management Service (WMSVC). You can do this by running the following command:
+
+```powershell
+Install-WindowsFeature -Name Web-Mgmt-Service 
+```
+
+You enable remote management by configuring the registry. You can do this with the following command:
+
+```powershell
+Set-ItemProperty -Path HKLM:\SOFTWARE\Microsoft\WebManagement\Server  -Name EnableRemoteManagement -Value 1
+```
+
+You can then configure the service to start automatically by running the command:
+
+```powershell
+Set-Service -Name WMSVC -StartupType Automatic
+```
+
+You have to allow inbound management traffic to the service. You can do this using the following command, restricting incoming management traffic to a designated management subnet (here it's 192.168.15.0/24):
+
+```powershell
+New-NetFirewallRule -DisplayName "IIS Remote Management" -Direction Inbound -Action Allow -Service WMSVC -RemoteAddress 192.168.15.0/24
+```
+
+Once WMSVC is running and listening, you can open IIS Manager on a different Windows machine and use the "Connect to a Server" option and enter the hostname (or IP) of your Server Core machine. You'll typically authenticate with an account that has local administrator privileges on the server hosting IIS.

learn-pr/advocates/deploy-configure-internet-information-services/includes/3-initial-configure-validate.md

@@ -0,0 +1,49 @@
+The deployment of the web server role creates a web site named Default Web Site. This site uses the path C:\inetpub\wwwroot as its content root and listens on port 80 (http) on all IP addresses configured for the server. The Default Web Site also has an empty host name binding, which means it responds to any host name on that server's IP. This continues to occur unless you configure an additional site, specifying a host name, for the same port.
+
+You can verify that the default web site is present by navigating to http://localhost using the local browser, or by navigating to the server's IP address or DNS name using a web browser on a remote host.
+You can also test that the website is present using the Invoke-WebRequest PowerShell command.
+
+```powershell
+Invoke-WebRequest -Uri "http://localhost/"
+```
+
+## Exploring the IIS Manager Interface
+
+IIS Manager (inetmgr.exe) is the graphical tool for managing IIS. On launch, you see a window with a tree on the left. Select the server node to expand it. Under it, you see subnodes for Application Pools and Sites. If you expand Sites, you see Default Web Site listed.
+
+[![A screenshot showing IIS Manager console.](../media/iis-manager.png)](../media/iis-manager.png#lightbox)
+
+When you select the server itself or a site, the middle pane populates with features. These allow you to configure settings such as authentication at the server level, or settings at the level of an individual site level. Settings configured at the site level take precedence over those configured at the server level.
+
+You can determine which IIS features are installed by looking at the Features View for the server. For instance, if "URL Rewrite" is installed, you'd see an icon for it under the IIS section. If Dynamic Content Compression was installed, you'll see a "Compression" icon that includes both static and dynamic compression settings. If you're looking for a setting and it's not present, you might need to install the appropriate web server role service using Server Manager or PowerShell.
+
+## Basic configurations
+
+There are a few basic settings and checks that you should be familiar with before using IIS in a production environment. These include:
+
+- Default documents
+- SSL Settings
+- HTTP Compression
+
+### Default documents
+
+The default document is the file that IIS serves if a user requests a URL that corresponds to a folder. For example, if a user goes to http://yoursite/ (with no page specified), IIS looks for a default document in that folder. Typical defaults include Default.htm, Default.asp, index.htm, index.html, and iisstart.htm. In IIS Manager, you can configure this at the server or site level by double-selecting Default Document. You see the list of default files. You can add (for example, if your application uses home.aspx as the main page, you could add that), remove, or reorder these entries. The server-level list serves as the default for all sites, but you can override per site.
+
+[![A screenshot showing the Default Document dialog.](../media/default-document.png)](../media/default-document.png#lightbox)
+
+### SSL settings
+
+To configure SSL for a website in IIS, first install or import a server certificate into the Local Computer\Personal certificate store so IIS can use it. Then open IIS Manager, select the website, and choose Bindings from the Actions pane. Add or edit an https binding, set the port to 443, select the appropriate SSL certificate, and enable SNI if the server hosts multiple HTTPS sites on the same IP address. 
+
+[![A screenshot showing the Add Site Binding dialog.](../media/contoso-certificate.png)](../media/contoso-certificate.png#lightbox)
+
+After applying the binding, you can use the SSL Settings feature to require SSL for the site or specific content. You can optionally configure an HTTP-to-HTTPS redirect so users will be automatically sent to the secure version of the site.
+
+[![A screenshot showing the SSL Settings dialog.](../media/certificate-settings.png)](../media/certificate-settings.png#lightbox)
+
+### HTTP compression
+
+IIS can compress responses to clients, reducing bandwidth and speeding up web content delivery. There are two types: static compression (for files like HTML, CSS, JS, images) and dynamic compression (for content generated by applications, like ASP.NET or PHP pages). By default, the Static Content Compression feature may already be installed if you accepted recommended defaults, but Dynamic Content Compression might not be. 
+
+> [!NOTE]
+> On Windows Server, adding the Web Server role typically enables the basic firewall rules for World Wide Web Services (HTTP and HTTPS) on Domain networks (if the server is domain-joined). If your server is standalone or in a workgroup, you may need to manually enable the rules for Public/Private profiles or create new rules for port 80 and 443.

learn-pr/advocates/deploy-configure-internet-information-services/includes/5-summary.md

@@ -0,0 +1,12 @@
+This module provided a comprehensive introduction to deploying and configuring Internet Information Services (IIS) on Windows Server 2025. You learned how IIS 10.0 integrates as a server role, explored its core architectural components and how to configure basic web site and server settings.
+
+## Learn more
+
+The following Microsoft Learn resources provide additional documentation and reference material for IIS on Windows Server:
+
+- [IIS Documentation Home](/iis/)
+- [Introduction to IIS Architecture](/iis/get-started/introduction-to-iis/introduction-to-iis-architecture)
+- [Installing IIS on Windows Server](/iis/install/)
+- [IIS Configuration Reference](/iis/configuration/)
+- [Configure HTTP Compression in IIS](/iis/configuration/system.webserver/httpcompression/)
+- [Managing Sites in IIS](/iis/manage/creating-websites/)

learn-pr/advocates/deploy-configure-internet-information-services/index.yml

@@ -0,0 +1,35 @@
+### YamlMime:Module
+uid: learn.devrel.deploy-configure-internet-information-services
+metadata:
+  ms.author: orthomas
+  author: Orin-Thomas
+  ms.date: 03/23/2026
+  title: Deploy and Configure Internet Information Services
+  description: Learn to deploy and configure Internet Information Services on Windows Server.
+  ms.topic: module
+  ms.service: windows-server
+title: Deploy and configure Internet Information Services
+summary: Internet Information Services (IIS) is Windows Server and Client's built-in web server role for hosting websites and web applications. By completing this module, you'll have a solid foundation for configuring, administering, and validating an IIS installation on the latest Windows Server.
+abstract: |
+  In this module you learn:
+  -	The architectural components of IIS
+  -	How to install IIS on Windows Server
+  -	How to configure IIS to host websites
+prerequisites: |
+  -	Basic understanding of Windows Server and its roles and features
+  -	Familiarity with web servers and their purpose
+iconUrl: /learn/achievements/generic-badge.svg
+levels:
+- beginner
+roles:
+- administrator
+products:
+- windows-server
+units:
+- learn.devrel.deploy-configure-internet-information-services.introduction-internet-information-windows-server
+- learn.devrel.deploy-configure-internet-information-services.install-web-server-role
+- learn.devrel.deploy-configure-internet-information-services.initial-configure-validate
+- learn.devrel.deploy-configure-internet-information-services.knowledge-check
+- learn.devrel.deploy-configure-internet-information-services.summary
+badge:
+  uid: learn.devrel.deploy-configure-internet-information-services-badge