Microsoft

Tweaking your IIS Settings


Lots of organizations have turned on Internet Information Services (IIS) as a Windows-based Web server. However, few of them have truly tweaked and optimized IIS. Here are some tips to improve and maximize your IIS performance.

Maximize your installation

Before you even decide to enable IIS, it is a good idea to evaluate the server you are going to install IIS on. What is this box currently running? Does it have sensitive and/or confidential information stored on it? You need to ask yourself such questions prior to opening up the box to the Internet or even an intranet.

If the Web server is going to be a stand-alone box, it is important to strip away all services and programs that aren’t necessary so you can optimize the security and performance of the box. For example, you might remove any applications that affect performance, such as File and Print services, UNIX services, or maybe even an Exchange or ISA server. Other services that are not needed on a stand-alone Web server include:

  • DHCP server
  • WINS server
  • Fax service
  • Messenger
  • Telnet
  • Internet Connection Sharing
  • NetMeeting
  • Computer Browser

Tweaking the registry

Let’s talk about managing the Windows registry as it relates to IIS. The registry stores settings for all installed hardware and applications. For your OS to work effectively, the registry must not be corrupt.

--------------------------------------------------------------------------------

Important note

Remember to back up your entire registry whenever you tweak it for performance.

--------------------------------------------------------------------------------

You can access the registry by selecting Start | Run and typing regedt32. The registry is broken down into these five areas:

  • HKEY_Classes_Root
  • HKEY_Current_Config
  • HKEY_Current_User
  • HKEY_Local_Machine
  • HKEY_Users

Let's walk through the steps for tweaking the registry to make IIS purr like a kitten. The registry settings for IIS are stored in HKEY_LOCAL_MACHINE | SYSTEM | CURRENTCONTROLSET | SERVICES | INETINFO | PARAMETERS. You can work with following values:

Cachesecuritydescriptor—Enter 1 to enable security descriptors or 0 to disable. If you have this option enabled, IIS will not have to reaccess user access rights; it will be able to look in the cache. This tweak is recommended for authenticated users only.

Checkcertrevocation—If you enter a value of 1, IIS will check to see whether a client certificate has been revoked. This is recommended only if you have your own certificates.

Disablememorycache—This setting allows you to disable the memory cache. It is enabled by default, and I see no need to disable it.

Listenbacklog—This registry setting specifies how many active connections IIS has in its queue. The default value is 15, and it can range all the way up to 250.

Maxcachedfilesize—You can determine the maximum size of a file that can be placed in cache. The maximum setting is 256 KB.

Maxconcurrency—This setting specifies how many threads per processor can run at the same time. It defaults to 0.

These are just some of the registry settings you can tweak for better performance. For more information on how to tweak the IIS registry, see IIS Common Registry Parameters (Q143180).

IIS metabase settings

Along the same lines as performing registry edits is using the Metabase to optimize IIS performance. The metabase is essentially a private registry just for IIS configuration data. This Microsoft Q article provides a good introduction to the IIS metabase, and this Q article includes a useful example of how to maximize metabase settings to configure IIS to handle a high-traffic load. For more information on the metabase settings, see the IISFAQ.

Once you have installed your IIS Web server for maximum performance and tweaked it using the registry and the IIS metabase, you're ready to read my article on monitoring and tuning IIS and take the next step toward achieving the most optimal performance.

 

Editor's Picks