The IIS 7.0 Resource Kit Book

The IIS 7.0 Resource Kit Book is finally out!

Ok, it’s been out for almost 2 months, but somehow it flew in under the radar and didn’t receive much PR. This is a little strange, since, it is the best IIS 7.0 book out there today coming straight from the IIS 7.0 product team and some of our best MVPs that have been using the product since its beta1 release. I got involved with the book late, but ended up becoming the lead author on the project and wrote about a half of the book by the end.  But, we also had an all-star cast that was great to work with - including our own dev extraordinaire Carlos Aguilar Mares, the quintessential IIS expert Brett Hill, Olga Londer, Kurt Meyer and some of our best MVPs: Steve Schofield and Bernard Cheah. After blogging and writing about IIS 7.0 for a while, writing a book about it was definitely a great experience ...

I wrote the following chapters:

1.       Managing Web Server Modules - All you’ll ever need to know about web server core and IS 7.0 modules as a IT Pro.

2.       Hosting Application Development Frameworks – how to plug different kinds of application development frameworks into IIS 7.0 in general, and the things you need to know to host ASP, ASP.NET, and PHP in particular.

3.       Implementing Security Strategies – This chapter is split between proactively applying security timeless security principles  of reducing surface area, least privilege, and defense in depth, and understanding and using 7.0 security features like authentication, authorization, and SSL. All other security info I’ve seen usually falls into one or the other category, so I’ve tried to bridge the gap to give you both the practical and proactive strategies and the details on security features. In my humble opinion, if you read only one chapter from this book, you should read this one.

4.       Managing Configuration and User Interface Extensions – understanding and managing configuration system and IIS Manager extensibility.

5.       Using Command Line Tools – a good reference for managing IIS 7.0 with the built-in command line tool, AppCmd.exe.

Aside from that, I ended up contributing heavily to many other chapters in the book, and the many “direct from the source” segments scattered throughout – including some history and stories about the development of IIS 7.0.

A little about the book …

First off, this book is primary for IT Pro audiences. It is not focused on the developer, so don’t expect to find API documentation and code samples for extending IIS 7.0. That said, because of the role that extensibility plays in IIS 7.0, it does cover IIS 7.0 extensibility from an architectural and feature management perspectives.

It is based on Windows Server 2008 RTM. Well, actually, RC1, which is pretty much the same thing. So, you can expect to find information about the late breaking features in the server release, and changes that made it in after Vista. It should be as current for Windows Server 2008 RTM and Vista SP1 as it gets.

If you are familiar with the IIS 6.0 Resource Kit, you’ll find that the IIS 7.0 Resource Kit book is a bit different. It departs from the documentation-like reference format used by its predecessor, and focuses quite a bit more on the conceptual model of the IIS 7.0 platform.

This is a key difference. IIS 7.0 is a lot more than a black-box product with a set of configuration options. It is a platform with a set of abstractions, platform services, and end-to-end extensibility. To properly manage and utilize this platform requires a set of high level understanding of the key principles, which become more important than the specific details.

I am a big believer in systems that are designed top-down, which helps the architecture remain true to itself and makes it a lot easier to understand and use.  We tried to design much of the core web server and its features this way, and so learning them this way is definitely the best approach.  I tried to follow the same principle in my chapters in the book – help you understand the principles behind the operation of the web server, and then introduce the details you need. This way, if you need to figure out something later, you can get to the details faster because you understand the ideas that drive them.

For better or for worse, the IIS 7.0 Resource Kit book is the only book on the market today (that I’ve seen) that can introduce the material this way.  I guess that makes sense –it’s hard to expect someone outside of the product team to have the same level of understand as someone who’ve spent 4 years building the damn thing J

Of course, you’ll also find plenty of details and how-to material in the book, from the details of the componentized setup to security and performance tips.  In my chapters, you can usually skip the initial conceptual discussion and jump towards the latter part for reference-type information.

Table of Contents

For quick reference, here is the table of contents: