IIS下的身份验证方式管理

设置、查看身份验证方式

 #导航到某站点下：

 cd IIS:\Sites\DemoSite\DemoApp

 #启用站点test01下的Windows身份验证

 Set-WebConfigurationProperty -filter /system.webServer/security/authentication/windowsAuthentication -name enabled -value true -PSPath IIS:\ -Location test01

 #启用站点default web site下应用程序pswa的Windows身份验证

 Set-WebConfigurationProperty -filter /system.webServer/security/authentication/windowsAuthentication -name enabled -value true -PSPath IIS:\ -Location 'default web site/pswa'

 #禁用站点MySite下的匿名身份验证

 Set-WebConfiguration system.webServer/security/authentication/anonymousAuthentication -PSPath IIS:\ -Location MySite -Value @{enabled="False"}

 #启用Form身份验证

 $config = (Get-WebConfiguration system.web/authentication 'IIS:\sites\Default Web Site')

 $config.mode = "Forms"

 $config | Set-WebConfiguration system.web/authentication

 #为MySite添加身份NTLM和Negotiate身份验证方式

 Add-WebConfiguration -Filter system.webServer/security/authentication/windowsAuthentication/providers -PSPath IIS:\ -Location MySite -Value NTLM

 Add-WebConfiguration -Filter system.webServer/security/authentication/windowsAuthentication/providers -PSPath IIS:\ -Location MySite -Value Negotiate

 #查看已安装的身份验证方式

 Get-WebConfiguration -filter /system.webserver/security/authentication -PSPath iis:\

 #查看站点test01下的windowsAuthentication身份验证方式

 Get-WebConfiguration -filter /system.webServer/security/authentication/windowsAuthentication -pspath iis:\ -Location test01 |select *

 #同上（只是路径写法不同）

 Get-WebConfiguration -filter /system.webServer/security/authentication/windowsAuthentication 'iis:\sites\test01' |select *

设置站点身份验证方式：

 Set-WebConfigurationProperty -Filter system.webServer/security/authentication/anonymousAuthentication `

                               -PSPath MACHINE/WEBROOT/APPHOST `

                               -Location 'Default Web Site' `

                               -Name Enabled `

                               -Value $true

检查某个站点/应用程序下的身份验证方式是否已启用

方法一：

 $siteName = "test01"

 $authentications=Get-WebConfiguration  -filter "system.webServer/security/authentication/*"  -PSPath "IIS:\Sites\$siteName"

 $authentications | % {$_ |Select ItemXPath,enabled}

方法二（笨方法）：

#定义站点名称

$site = "test01"

Import-Module WebAdministration

#获取所有已安装的身份验证方式

$auths = Get-WebConfiguration -filter /system.webserver/security/authentication -PSPath IIS:\

$authnames = $auths.Sections.name

Foreach ($auth in $authnames)

    {

    $authall = $auths.ItemXPath  + "/" + $auth

    #查看站点下每个身份验证是否启用

    Get-WebConfiguration -filter $authall -pspath IIS:\ -Location $site|select ItemXPath,Enabled

    }

IIS PowerShell 管理命令：http://technet.microsoft.com/en-us/library/ee790599.aspx