IIS下的身份验证方式管理

设置、查看身份验证方式

 #导航到某站点下：
 cd IIS:\Sites\DemoSite\DemoApp

 #启用站点test01下的Windows身份验证
 Set-WebConfigurationProperty -filter /system.webServer/security/authentication/windowsAuthentication -name enabled -value true -PSPath IIS:\ -Location test01

 #启用站点default web site下应用程序pswa的Windows身份验证
 Set-WebConfigurationProperty -filter /system.webServer/security/authentication/windowsAuthentication -name enabled -value true -PSPath IIS:\ -Location 'default web site/pswa'

 #禁用站点MySite下的匿名身份验证
 Set-WebConfiguration system.webServer/security/authentication/anonymousAuthentication -PSPath IIS:\ -Location MySite -Value @{enabled="False"}

 #启用Form身份验证
 $config = (Get-WebConfiguration system.web/authentication 'IIS:\sites\Default Web Site')
 $config.mode = "Forms"
 $config | Set-WebConfiguration system.web/authentication

 #为MySite添加身份NTLM和Negotiate身份验证方式
 Add-WebConfiguration -Filter system.webServer/security/authentication/windowsAuthentication/providers -PSPath IIS:\ -Location MySite -Value NTLM
 Add-WebConfiguration -Filter system.webServer/security/authentication/windowsAuthentication/providers -PSPath IIS:\ -Location MySite -Value Negotiate

 #查看已安装的身份验证方式
 Get-WebConfiguration -filter /system.webserver/security/authentication -PSPath iis:\

 #查看站点test01下的windowsAuthentication身份验证方式
 Get-WebConfiguration -filter /system.webServer/security/authentication/windowsAuthentication -pspath iis:\ -Location test01 |select *
 #同上（只是路径写法不同）
 Get-WebConfiguration -filter /system.webServer/security/authentication/windowsAuthentication 'iis:\sites\test01' |select *

设置站点身份验证方式：

 Set-WebConfigurationProperty -Filter system.webServer/security/authentication/anonymousAuthentication `
                               -PSPath MACHINE/WEBROOT/APPHOST `
                               -Location 'Default Web Site' `
                               -Name Enabled `
                               -Value $true

检查某个站点/应用程序下的身份验证方式是否已启用

方法一：

 $siteName = "test01"
 $authentications=Get-WebConfiguration  -filter "system.webServer/security/authentication/*"  -PSPath "IIS:\Sites\$siteName"
 $authentications | % {$_ |Select ItemXPath,enabled}

方法二（笨方法）：

#定义站点名称
$site = "test01"
Import-Module WebAdministration
#获取所有已安装的身份验证方式
$auths = Get-WebConfiguration -filter /system.webserver/security/authentication -PSPath IIS:\
$authnames = $auths.Sections.name
Foreach ($auth in $authnames)
    {
    $authall = $auths.ItemXPath  + "/" + $auth
    #查看站点下每个身份验证是否启用
    Get-WebConfiguration -filter $authall -pspath IIS:\ -Location $site|select ItemXPath,Enabled
    }

IIS PowerShell 管理命令：http://technet.microsoft.com/en-us/library/ee790599.aspx