Get Even More Visitors To Your Blog, Upgrade To A Business Listing >>

IIS Configuration Auditing

Go to English version

L’article de blog https://blogs.msdn.microsoft.com/webtopics/2010/03/19/iis-7-5-how-to-enable-iis-Configuration-auditing/ explique en détails l’audit de Configuration IIS.  J’aimerai ajouter quelques informations dans cet article.

Je recommende d’augmenter la taille du log à Mo de amnière à avoir un historique plus long des changements de configuration. Vous pouvez augmenter la taille en faisant un click droit sur le nom du log et en choisissant Propriétés. Application and Services Logs / Microsoft / Windows / IIS-Configuration/Operational event log

Aller à la version française

The https://blogs.msdn.microsoft.com/webtopics/2010/03/19/iis-7-5-how-to-enable-iis-configuration-auditing/ blog article explains in details the IIS Configuration Auditing.  I would like add some details in this article.

I recommend to increase the log size to 10 MB to have a longer history about the configuration changes. You can increase the size by right-clicking on the log name in the Event Viewer and choose Properties.

Application and Services Logs / Microsoft / Windows / IIS-Configuration/Operational event log

As a reminder, the Iis Configuration Auditing displays the configuration element which was changed, the user who initiated the change, and the original and the new value of the element. In the screenshot below the local administrator has changed the binding of the “Default Web Site” from “*:80:” to “*:81:” (Only the port number has changed”) the March 15th 2017 at 06:15:48 AM.

Event log entry

Note : A single change can generated multiple log entries in this dedicated event log depending of the configuration sections to commit.

If you want to enable the configuration auditing and increase the log size to 10 MB via a script I propose the two following possibilities :

  • From an elevated command prompt:
REM To enable the configuration auditing and increase the log size to 10 MB. wevtutil Set-Log Microsoft-IIS-Configuration/Operational /e:true /ms:10485760
  • From an elevated PowerShell prompt:
# To enable the configuration auditing and increase the log size to 10 MB. $logName = Microsoft-IIS-Configuration/Operational $log = NewObject System.Diagnostics.Eventing.Reader.EventLogConfiguration $logName $log.IsEnabled=$true $log.MaximumSizeInBytes=10MB $log.SaveChanges()

Laurent.

Share the post

IIS Configuration Auditing

×

Subscribe to Msdn Blogs | Get The Latest Information, Insights, Announcements, And News From Microsoft Experts And Developers In The Msdn Blogs.

Get updates delivered right to your inbox!

Thank you for your subscription

×