Hello everyone. This seems to be a regular topic here, and sadly all the posts I've read direct me to a solution that works for most folks but has not worked for me. I also could be doing this completely wrong or have the wrong idea, and am open to suggestions. I am fairly new to all of this.

The Situation

I am trying to use Web Deploy to sync from one IIS server to another over a secure connection. The source machine has its firewall disabled completely and access restricted by IP and port via AWS EC2 Security Groups. With Web Deploy installed on the source and the target, initiating the sync from the target machine, and with port 80 open to the target machine, everything works fine.

Here is the successful command string:

"C:\Program Files\IIS\Microsoft Web Deploy v3\msdeploy.exe" -allowUntrusted -verb:sync -
source:iisApp="<appName>",computername=<url.pointingToIP.ofserver>,UserName='<username>',Password='<password>' -
dest:iisApp="<targetApp>" > c:\www\sync.log

The source URL only works if I leave off https:// - if I use just the url by itself it works fine. Just to be sure I jsut tested it again after clearing out the target destination:

Total changes: 2431 (2431 added, 0 deleted, 0 updated, 0 parameters changed, 27676670 bytes copied)

Questions

1. Is this secure? I've done this via VPN 'locally' as well but would prefer not to have to connect the vpn each time we need to sync.
2. If this is not secure, what would I need to do to use https to provide a secure transfer?

Thanks for your time and any insight you may have to offer.

I want to deploy web application using web deploy 3.0 using import manager wizard in IIS7,

Here i have to specify multiple parameter to configure my web app so my Question is,

Can we show parameters in paging depending on differnt section instead of showing all paramerts on single page.

Is this possible in Web deploy wizard, i am not getting write doc or link regarding this.

Please help me to acheive this.

Regards,

Rohit

I got an issue today related to the MSDeploy version installed in the server. 

The same project build in machine 1 generates this section (I took this from the Web Deployment Package generated by VS2010):

@rem ---------------------------------------------------------------------------------
@rem if user does not set MsDeployPath environment variable, we will try to retrieve it from registry.
@rem ---------------------------------------------------------------------------------
if "%MSDeployPath%" == "" (
for /F "usebackq tokens=1,2,*" %%h  in (`reg query "HKLM\SOFTWARE\Microsoft\IIS Extensions\MSDeploy" /s  ^| findstr -i "InstallPath"`) do (
if /I "%%h" == "InstallPath" (
if /I "%%i" == "REG_SZ" (
if not "%%j" == "" (
if "%%~dpj" == "%%j" (
set MSDeployPath=%%j
))))))

And in machine 2:

@rem ---------------------------------------------------------------------------------
@rem if user does not set MsDeployPath environment variable, we will try to retrieve it from registry.
@rem ---------------------------------------------------------------------------------
if "%MSDeployPath%" == "" (
for /F "usebackq tokens=2*" %%i  in (`reg query "HKLM\SOFTWARE\Microsoft\IIS Extensions\MSDeploy\1" /v InstallPath`) do (
if "%%~dpj" == "%%j" ( 
set MSDeployPath=%%j
)))

if not exist "%MSDeployPath%\msdeploy.exe" (
echo. msdeploy.exe is not found on this machine. Please install Web Deploy before execute the script. 
echo. Please visit http://go.microsoft.com/?linkid=9278654
goto :usage
)

Machine 1: "HKLM\SOFTWARE\Microsoft\IIS Extensions\MSDeploy"

Machine 2: "HKLM\SOFTWARE\Microsoft\IIS Extensions\MSDeploy\1" 

If I try to install the package in a server wich contains only MSDeploy v2, Machine 1's package works and Machine 2's package doesn't.

BTW: Machine 1 and 2 are build controllers.

I compared the software in both machines, and they have almost the same setup:
VS2010 ultimate
Same service packs
Web Deployment Tool (1.0)

I want to understand why there is this difference, if anyone know what could be the real difference in the servers.

In Visual Studio 2012 RC when I try to validate a Web Deploy connection I get this error message:

ERROR_DESTINATION_NOT_REACHABLE

The required Web Management Service is started on the server and Web Deploy 3.0 RC is installed.

Then using Remote Desktop Connection I log on the server and go check

IIS

 logs located at C:\inetpub\logs\LogFiles\W3SVC1

2012-07-13 20:58:49 185.201.117.17 HEAD /msdeploy.axd site=Default%20Web%20Site 8172 - 189.10.32.194 - 404 0 2 78

It's giving me a 404.

After trying to get this working for almost 6 hours now (reading a lot of material including this great Troubleshooting guide by IIS team titled Troubleshooting Web Deploy problems with Visual Studio and this related question Visual Studio 2010 Web deployment task failed) I decided to ask for help here and see if anyone has a clue about what can be the problem... Do you know what's causing this 404 error?

If you need any more info, just ask me and I'll provide it... :)

Edit

Yesterday I also tried the following

msdeploy

test

C:\Program Files\IIS\Microsoft Web Deploy V3>msdeploy -verb:dump -source:content
path=c:\test,computerName=xxxxxxxxxx.publiccloud.com.br,username=User,password=Password
Info: Using ID 'a246a13c-7777-4226-964c-fe9934c60b77' for connections to the rem
ote server.
MSDeploy.contentPath
c:\test
c:\test
c:\test\test.txt

Windows Server 2008 Firewall is disabled and I can access IIS on the server from my local machine with these URLs:

http://xxxxxxxxxx.publiccloud.com.br/SISPEC

https://xxxxxxxxxx.publiccloud.com.br:8172

please help.

Is there some way to deploy database from package without rollback sql-script transaction if fail?

Clarify: I want to deploy DB from script file using dbSqlPackage provider. During deploy I have some errors in my script. So I need to debug where is the problem in my script file. Problem is that after fail in deploying  all the changes in Database are rolled back. Is there some parameter in msdeploy that dont roll back during deploy? 

Very strange issue, I can not understand.

Please help.

I am deploying DB from package using msdeploy. In the package in script file i put only one query: 

insert [sometable].[somename] ([id], [text]) values (1, N'create schema [name]
go
')

After running the deploy command sync I recive the error: 

Error: Unclosed quotation mark after the character string 'CREATE SCHEMA [name]'.
Incorrect syntax near 'CREATE SCHEMA [name]'.
Error count: 1.

If I execute this query directly from SQL Management Studio it is fine.

Where is the problem?

I think my needs are relatively simple so I hope someone should easily be able to help. I need to back up the entire IIS configuration so that IIS can be restored on another computer.

My first backup strategy was to use this command:

AppCmd.exe Add Backup

I soon abandoned that because it only works when restoring to the same computer where the backup was made. You can't copy the files and restore on another computer because the backup does not include the server encryption keys.

My current backup strategy is to use Shared Configuration. I'm not actually sharing the IIS configuration between 2 servers. I'm just using this feature to store the IIS config, including encryption keys, in one folder that I can include in my daily backup. I have been doing this for several years and it works really well. I have been able to restore the entire IIS configuration when migrating the entire web server to another machine many times.

But now there is a problem. We want to start using Application Request Routing and that is not compatible with Shared Configuration. So I'm looking for another way to back up the IIS config and I'm considering MSDeploy. I'm able to successfully generate the config to a folder (I think) but not restore.

I'm using this command to backup on Windows Server 2008:

msdeploy.exe -verb:sync -source:webserver -dest:archiveDir=c:\archive,encryptPassword=secret_password -disableLink:ContentExtension

I'm using this command to restore on a new Windows Server 2012 server:

msdeploy.exe -verb:sync -source:archiveDir=c:\temp\deploy,encryptPassword=secret_password -dest:webserver

When I try to restore, the output terminates with these errors:

Error: Value cannot be null.
Parameter name: value

The output fails to say what value is null that should not be.

Can anyone help me write the msdeploy command so that I can backup the entire IIS configuration and restore on another machine? Note that I want to back up only the IIS configuration; I don't need to back up other data like web site content files. I am already backing up other critical files.

Or if you can recommend another backup method, please do.

Cam

We're making use of Microsoft Web Deploy v3 for deploying our websites to our customers.

We're using the getSystemInfo feature of Web Deploy for connectivity check in remote deployment scenarios.

If the getSystemInfo call returns an xml with the target system properties, means that the connectivity is established and the user is an administrator in that particular machine.

This is where we're facing an issue. Eventhough the getSystemInfo call returns the system properties xml without any error, an Event Log of type Error is logged in the Windows event viewer .

This occurs in the following versions of Web Deploy: v2.1, v3.0 and v3.5. Only difference is the stack trace in Event Log.

The details of the error, as in the event log, is described below (took from Windows 7 SP1):

with Microsoft Web Deploy v3.0 and v3.5:

User: Client IP: 172.26.8.237:80 Content-Type: Version: 9.0.0.0 MSDeploy.VersionMin: 7.1.600.0 MSDeploy.VersionMax: 9.0.1631.0 MSDeploy.Method: GetPackage MSDeploy.RequestId: 3e823066-6387-4861-a86d-05083c910dc3 MSDeploy.RequestCulture: en-US MSDeploy.RequestUICulture: en-US ServerVersion: 9.0.1631.0 Skip: objectName="^configProtectedData$" Provider: webServer, Path:

A tracing deployment agent exception occurred that was propagated to the client. Request ID '3e823066-6387-4861-a86d-05083c910dc3'. Request Timestamp: '8/7/2013 5:45:06 PM'.

Error Details: System.Net.HttpListenerException (0x80004005): The specified network name is no longer available    at System.Net.HttpResponseStream.Write(Byte[] buffer, Int32 offset, Int32 size)    at System.IO.BufferedStream.Write(Byte[] array, Int32 offset, Int32 count)    at System.IO.BinaryWriter.Write(Int64 value)    at Microsoft.Web.Deployment.PackageSerializer.UnsafeSerializeSingleObject(DeploymentObject obj, Int32 parentId)    at Microsoft.Web.Deployment.PackageSerializer.SerializeSingleObject(DeploymentObject obj, Int32 parentId)    at Microsoft.Web.Deployment.PackageSerializer.SerializeChildrenSyncFirst(SerializeObjectContext objectContext)    at Microsoft.Web.Deployment.PackageSerializer.SerializeChildrenSyncFirst(SerializeObjectContext objectContext)    at Microsoft.Web.Deployment.PackageSerializer.SerializeChildrenSyncFirst(SerializeObjectContext objectContext)    at Microsoft.Web.Deployment.PackageSerializer.SerializeChildrenSyncFirst(SerializeObjectContext objectContext)    at Microsoft.Web.Deployment.PackageSerializer.SerializeChildrenSyncFirst(SerializeObjectContext objectContext)    at Microsoft.Web.Deployment.PackageSerializer.SerializeChildrenSyncFirst(SerializeObjectContext objectContext)    at Microsoft.Web.Deployment.PackageSerializer.SerializeChildrenSyncFirst(SerializeObjectContext objectContext)    at Microsoft.Web.Deployment.PackageSerializer.SerializeChildrenSyncFirst(SerializeObjectContext objectContext)    at Microsoft.Web.Deployment.PackageSerializer.SerializeChildrenSyncFirst(SerializeObjectContext objectContext)    at Microsoft.Web.Deployment.PackageSerializer.SerializeChildrenSyncFirst(SerializeObjectContext objectContext)    at Microsoft.Web.Deployment.DeploymentAgent.HandleGetPackage(DeploymentAgentWorkerRequest workerRequest)    at Microsoft.Web.Deployment.DeploymentAgent.HandleRequestWorker(DeploymentAgentAsyncData asyncData)    at Microsoft.Web.Deployment.DeploymentAgent.HandleRequest(DeploymentAgentAsyncData asyncData)

with Microsoft Web Deploy v2.1:

User: Client IP: 172.26.8.200:80 Content-Type: Version: 8.0.0.0 MSDeploy.VersionMin: 7.1.600.0 MSDeploy.VersionMax: 7.1.1070.1 MSDeploy.Method: GetPackage MSDeploy.RequestId: 76ebc861-36c1-48d5-85f8-fc4d57c40d54 MSDeploy.RequestCulture: en-US MSDeploy.RequestUICulture: en-US Skip: objectName="^configProtectedData$" Provider: webServer, Path:

Tracing deployment agent exception. Request ID '76ebc861-36c1-48d5-85f8-fc4d57c40d54'. Request Timestamp: '8/7/2013 2:55:13 PM'.

Error Details: System.Net.HttpListenerException: An operation was attempted on a nonexistent network connection    at System.Net.HttpResponseStream.Dispose(Boolean disposing)    at System.IO.Stream.Close()    at System.IO.BufferedStream.Dispose(Boolean disposing)   at System.IO.Stream.Close()    at Microsoft.Web.Deployment.PackageSerializer.Dispose()    at Microsoft.Web.Deployment.DeploymentAgent.HandleGetPackage(DeploymentAgentWorkerRequest workerRequest)    at Microsoft.Web.Deployment.DeploymentAgent.HandleRequestWorker(DeploymentAgentAsyncData asyncData)    at Microsoft.Web.Deployment.DeploymentAgent.HandleRequest(DeploymentAgentAsyncData asyncData)

Kindly help us to resolve the issue.

Any troubleshooting tip would be appreciated.

I was just about to start using the deployment technique, Automating Deployment with Microsoft Web Deploy, but i don't have the Management Service Delegation icon on my Windows Server 2008 R2 server. How do I get that to appear?

Regards,

Magnus

Is there any way to make an incremental sync of a file using msdeploy?
I thing that when comparing directories, complete files with changes are sync, but not only those changes (incremental changes).
In my case, I need to make small changes to many files (for example, if I change 100 files from 1MB each one, I have to update those 100 MB using msdeploy?).

Hi, I just upgraded to Web Deploy 3.5 and I'm hoping to use WMSvc tracing to get a list of transferred files.   Is this possible?  If so, what trace level would be required?  Also I hope to debug an intermittent problem with "socket errors".  I found a link that describes WMSvc tracing but it applies to MSDeploy v1:  http://technet.microsoft.com/en-us/library/ff729437(v=ws.10).aspx   Should I follow the instructions for setting trace level, except change

reg add "HKLM\SOFTWARE\Microsoft\IIS Extensions\MSDeploy\1" /v EnabledTraceLevel /t REG_DWORD /d 2 /f

to

reg add "HKLM\SOFTWARE\Microsoft\IIS Extensions\MSDeploy\3" /v EnabledTraceLevel /t REG_DWORD /d 2 /f   ?

Thank you.

Hi

I have been playing around with the dbDACFx provider to deploy databases based on the output from my SSDT project (a dacpac file), instead of using the $(IntermediateOutputPath)AutoScripts\MyDb_IncrementalSchemaOnly.dacpac which can be generated for my. 

I have tried to use the Parameters.xml file to set custom deploy parameters but when using the the following xml I am a bit lost:

<parameter name="Service Account" description="Please provide a service account" defaultValue="Test" tags="">
<parameterEntry kind="SqlCommandVariable" scope="<which file to use here?>" match="ServiceAccount" />
</parameter>

What file do I use as scope? As I see it, it makes no sense to use the dacpac file, since it is some binary format. How can I instruct ms deploy to pass the parameters on to the DACFx framework so when it deploys the dacpac the sqlcmdvars have been correctly set?

Hi Guys,

I have several IIS7.5 AP Servers using Anonymous Authentication ，and  installed webdeply to sync IIS Configuration and contents from one to others :

msdeploy -verb:sync -source:apphostconfig="Default Web Site" -dest:apphostconfig="Default Web Site",computername=server02

msdeploy -verb:sync -source:appPoolconfig="ASP.NET v4.0" -dest:appPoolconfig="ASP.NET v4.0",computername=server02 

msdeploy -verb:sync -source:webServer -dest:webServer,computername=server02

It will get successful results, not need validation or password .

But there is a risk: if another person also build an IIS7.5 AP Server,he also can sync the configuration and contents to/from my Server not need validation ,Like:

msdeploy -verb:sync -source:webServer -dest:webServer,computername=server02

How to avolid this problem? Thanks a lot~!

Note: This is a cross-post from: http://serverfault.com/questions/254326/web-deploy-to-iis-7-with-pass-through-authentication
I thought that forums.iis.net might have more specialized knowledge on the topic.  Any help is much appreciated!

After much trial and error configuration, I'm currently able to script msdeploy.exe to deploy a package built in Visual Studio 2010 to a remote server running IIS 7.5 with a command line like:

Basic authentication command:

msdeploy -source:package="project.zip"
-dest:auto,computerName='https://webserver:8172/MsDeploy.axd',authtype='Basic',username='DOMAIN\myuser',password='xxx',includeAcls='False'
 -verb:sync -setParamFile:"SetParameters.xml" -allowUntrusted

Can I eliminate the need to provide a password in the command line by enabling pass-through authentication? The Web Deploy docs mention the authType parameter that can specify 'NTLM', instead of Basic. However, whenever I try this (see example below), I get an error indicating a 401. The WMSvc web log shows a 401.2 and no userid is populated in that log entry, unlike previous attempts using Basic authentication do actually show the DOMAIN\myuser in the web log. No other useful information is found in event viewer of either client or server.

Note: The target webserver is on another domain, so I establish a token with:

net use \\webserver /u:DOMAIN\myuser

Pass-through authentication command attempt:

msdeploy -source:package="project.zip" 
-dest:auto,computerName='https://webserver:8172/MsDeploy.axd',authtype='NTLM',includeAcls='False'
 -verb:sync -setParamFile:"SetParameters.xml" -allowUntrusted

It seems msdeploy.exe is not properly authenticating with IIS at the HTTP level. What could be wrong?

Client is Windows XP, Server is Win2008R2. Both are running msdeploy.exe version 7.1.618.0. Both have .NET 2.0, 3.5, and 4.0 installed.

I am trying to read the app pool configuration from a remote IIS 8 server with IIS management delegation active. This works fine when the IIS site and the application pool have the same name:

msdeploy.exe" -verb:dump -xml -source:apppoolconfig="MySite",wmsvc="https://MyServer:8172/msdeploy.axd?site=MySite",authType="basic",username="DeploymentUser",password="******" -allowUntrusted -verbose

However, when the site and the application pool have different names command fails with an error:

msdeploy.exe" -verb:dump -xml -source:apppoolconfig="MyAppPool",wmsvc="https://MyServer:8172/msdeploy.axd?site=MySite",authType="basic",username="DeploymentUser",password="******" -allowUntrusted -verbose

Error Code: ERROR_USER_NOT_AUTHORIZED_FOR_DEPLOYMENTPROVIDER

Error: Object of type 'appPoolConfig' and path 'MyAppPool' cannot be created.

I presume this is because I have not set-up the management service delegation rule correctly, but I cannot figure out what the settings should be. This is the rule that I have:

Providers = appPoolConfig
Actions = *
Path Type = Path Prefix
Path = {userScope}
Identity Type = "Specific User" (who is a local admin)

"DeploymentUser" (used in the msdeploy.exe calls above) is assigned to this rule.

Could anyone please explain what I am doing wrong?

I'm really pulling my hair out on this one.

I have two computers - my workstation with windows 8 and a local server with windows server 2012.

When i run this command on my workstation: msdeploy -verb:sync -source:dbFullSql='Data Source=\\RemoteServerPath\App_Data\Database.sdf' -dest:dbFullSql='C:\SqlData.sql'
It creates the sql file smoothly no problems there.

When i run the same command on the server and on the same file: msdeploy -verb:sync -source:dbFullSql='Data Source=C:\ServerPath\App_Data\Database.sdf' -dest:dbFullSql='C:\SqlData.sql'
It creates the sql file, true, but the difference is in what is in the file.

In the first file i created it formated the dates like this: 2013-08-04T21:53:10.540
But on the server it formats the dates like this:  2013-08-04 21:53:10.540

I don't understand why it does that. I'm running the same version of Web Deploy v3.
There must be something that is set up differently somewhere, but i have no clue what to look for.

Any help would be greatly appreciated.

I'm trying to deploy to a high-availability configuration: 2 Windows 2003/IIS 6.0 servers behind a load balancer. The Virtual Directory definitions both point to the same NAS share via a UNC address. MSDeploy connects to the first server, gets the UNC address then fails authenticating access to the NAS folders. MSDeploy is being run by a workflow engine using an Active Directory ID. That ID is in the Administrators group for both web servers and has update authority to the NAS folders. I've logged into the web servers using the ID and can access the folders from the web servers by using Start->Run and specifying the UNC path.

Here are the messages from MSDeploy:

d:\build\agent3\bi_hartsource_mmaccountscore\Microsoft_Deploy_Web_App\trunk>"C:\Program Files\IIS\Microsoft Web Deploy V3\msdeploy.exe" -verb:sync -source:package=MMAccountScoreToSiebel.zip -dest:auto,computerName=AD1HFDS7IF901 -disableLink:AppPoolExtension -disableLink:ContentExtension -disableLink:CertificateExtension -setParamFile:"MMAccountScoreToSiebel.SetParameters.xml" 2>MMAccountScoreToSiebel.deploy.log

Info: Using ID '7abfef93-1554-44cf-9ecf-80f326e88167' for connections to the remote server.

Info: Adding sitemanifest (sitemanifest).

Info: Adding virtual path (Default Web Site/MMAccountScore)

Info: Adding directory (Default Web Site/MMAccountScore).

d:\build\agent3\bi_hartsource_mmaccountscore\Microsoft_Deploy_Web_App\trunk>type MMAccountScoreToSiebel.deploy.log

Error Code: ERROR_INSUFFICIENT_ACCESS_TO_SITE_FOLDER

More Information: Unable to perform the operation ("Create Directory") for the specified directory ("\\ad1.prod\HIG\BusIns\HS\INT\HSIF\MMAccountScore"). This can occur if the server administrator has not authorized this operation for the user credentials you are using. Learn more at: http://go.microsoft.com/fwlink/?LinkId=221672#ERROR_INSUFFICIENT_ACCESS_TO_SITE_FOLDER.

Error: The error code was 0x80070005.

Error: Access to the path '\\ad1.prod\HIG\BusIns' is denied.

Error count: 1.

Does the Web Deploy Agent on the web server use the context of the ID which executed the MSDeploy command to access the folders that are behind the Virtual Directory? Is additional configuration of Web Deploy required? There isn't much doc I can find on configuring Web Deploy on Windows 2003/IIS 6.0 other than putting the ID of the remote requester into the Administrators group...

 I have a development machine, a Web Server, and a File Server.  My Web Server is hosting a website on a share from a File Server.  Previously when I had all these machines on a domain, I was able to publish directly from VS 2010 on the development machine.  Now that I have removed the domain, I am getting:

Error 3 Web deployment task failed.((2/11/2012 6:14:15 PM) An error occurred when the request was processed on the remote computer.)

(2/11/2012 6:14:15 PM) An error occurred when the request was processed on the remote computer.
An error was encountered when processing '\\Spike\Website\Applications\CallbackASPApp'.
Logon failure: unknown user name or bad password.
  0 0 CallbackASPApp

I have updated the Web Server to use the new credentials when accessing the share on the File Server.  The website is functioning properly, but I cannot publish successfully. I don't know which user/pass it's trying to use that's generating the error above.  I've even granted Everyone to both the security and share of the web folder on the File Server to no avail.  The credentials I'm supplying match an Administrator account on the Web Server.

 Any suggestions to help me troubleshoot?

1. I have a Windows Server 2003 machine with IIS 6 which currently holds everything. I need to migrate everything to a Windows Server 2012 machine with IIS 8. Will using the same set of instructions as migrating to IIS 7 work? Such as the instructions from this site..

http://technet.microsoft.com/en-us/library/ff633422%28v=ws.10%29.aspx

2. My second question. Will using the Web Deploy utility remove everything that is on the old server or will everything be on the old server as well as the new server once I use this utility and migrate everything?

Thanks for the help.

Hello all,

I have a questionm. Is there an appropriate place to file feature requests? I am sorry if I am asking in a wrong thread so please bare with me and be kind.

Best regards,
Aaron