The Web Configuration tool is the easiest way to configure IIS so we highly recommend that you use it to configure your sites. However, in some situations you may not be able to do this, especially if you plan on hosting your site with an ISP.

So here are the manual steps for configuration

Virtual Directory Configuration

The first step is configuration of a Virtual directory for the application. A

Windows 2003/XP:

• Bring up the IIS Service Manager from Administration Tools
  
• Find the Web Site you want to install on (Default Web Site for example)
  
• Right Click | Create New Virtual Directory
  
• Type in a name for the directory (WebStore for example)
  
• Select the location of the Web Store Web Directory (<installDir>\wwStore)
  
• The virtual directory is created for you
  
• Select the virtual directory in the IIS manager
  
• Click on the Create button next to the Application Name to create an Application
  
• If desired pick a specific ApplicationPool (you can also create a custom pool later and change this value)
  
• Click on the Directory Security Tab
  
• Make sure Integrated Windows Authentication is enabled
  
• Click the ASP.NET tab in the manager
  
• Ensure that ASP.NET 2.0.50727 is selected for this application
  

Windows Vista/Longhorn Server:

• Bring up the IIS Service Manager from Control Panel | Administration Tools
  
• Find the Web Site you want to install on
  
• Right Click | Create Application
  
• Type in the name (WebStore for example)
  
• Select an Application Pool
  Ideally choose a pool that uses the ISAPI Pipeline
  Make sure the Application Pool is configured to use ASP.NET 2.0
  
• Type in a name for the directory (WebStore for example)
  
• Select the location of the Web Store Web Directory (<installDir>\wwStore)
  
• Click Ok: The virtual directory is created for you
  
• Select the virtual directory
  
• Select Authentication and make sure Windows Authentication is enabled
  

The next step is to configure file level permissions for this directory so that the IIS Anonymous User and the ASP.NET application account that is running your application has rights in this directory. You do this by setting file system permissions (or your ISP does).

File System Permissions

To set permissions manually, run Windows Explorer and go to the installation directory and select the WestWindWebStore directory. Right Click and select Properties, then click on the Security tab:

Add the Internet Guest Account with read/execute permissions, and depending on your Operating System the NETWORK SERVICE (Windows 2003) or ASPNET (Windows 2000 or XP) account to the permissions. If you are using a Web Hosting Service this account might be different and should be provided for you as part of your configuration information.

For the latter account add full access to the rights - this is the account the Web application runs under and this option allows the application to have full access to this directory tree so configuration information can read and written and the XML log file can be written to.

Also set permissions on the Admin directory by removing the Internet Guest Account (IUSR_) and allow access only to Administrative or specific accounts that have access to the admin features.

Here's a summary:

Windows XP/2000/NT	Windows Server 2003	Windows Vista
Internet Guest Account Read and Execute Rights	IUSR_MachineName Read and Execute Rights	INTERNET USER Read and Execute Rights
ASPNET Full Rights	NETWORK SERVICE Full Rights	NETWORK SERVICE Full Rights
Admin Directory Permissions
Remove Internet Guest/IUSR_MachineName account to force authentication

Once these steps are complete you can now use the Administration interface of the Web Site to configure your Web Store application. The link to do so is: