IIS Builder
Automated IIS web server deployment and configuration toolkit for Windows environments.
git clone https://github.com/MHaggis/notes.git && cd notes/utilities/IISBuilder && .\Install-IIS.ps1 ⚠ The Problem
Setting up IIS web servers with proper security configurations, SSL certificates, application pools, and virtual directories is repetitive and error-prone. Manual configuration leads to inconsistencies across environments.
✓ The Solution
IIS Builder automates the complete setup and configuration of IIS web servers, including security hardening, SSL/TLS configuration, application pool creation, and virtual directory management. It ensures consistent, secure deployments.
⚡ Impact
Reduces IIS deployment time from hours to minutes while ensuring security best practices are consistently applied across all web server instances.
Features
Automated Installation
- IIS role and feature installation
- Required Windows features
- Management tools
- URL Rewrite module
Security Hardening
- Remove default websites
- Disable unnecessary modules
- Configure security headers
- Set proper file permissions
SSL/TLS Configuration
- Certificate installation
- HTTPS bindings
- TLS protocol configuration
- Cipher suite optimization
Application Pool Management
- Custom pool creation
- .NET version configuration
- Identity settings
- Recycling policies
Configuration Options
Website Setup
- Virtual directories
- Application pools
- Bindings (HTTP/HTTPS)
- Default documents
Security Settings
- Authentication methods
- Authorization rules
- Request filtering
- IP restrictions
Performance Tuning
- Compression settings
- Caching policies
- Connection limits
- Timeout values
Use Cases
Rapid Deployment
Quickly deploy IIS servers for development, testing, or production.
Consistent Configuration
Ensure all IIS instances follow the same security and configuration standards.
Security Research
Build test environments with specific IIS configurations.
Disaster Recovery
Rapidly rebuild IIS servers from configuration templates.
Requirements
- Windows Server 2012 R2 or later
- PowerShell 5.1 or later
- Administrator privileges
- Internet connection (for module downloads)
Post-Installation
The script configures:
- Default website removal
- Security headers
- Logging configuration
- Error pages
- MIME types
Automate your IIS deployments
Related Modules
AppLockerGen
AppLocker Policy Generator. Create and manage AppLocker policies programmatically.
ASRGEN
ASR Configurator, Essentials and Atomic Testing. Configure and test Attack Surface Reduction rules.
LOLDrivers
Living Off The Land Drivers - A curated list of Windows drivers used by adversaries to bypass security controls. The definitive resource for vulnerable driver detection.