Build your application and locate all of the components that you need to distribute. An ATL Server Web application or XML Web service could include any of the following items:

• ISAPI extension DLL

• Web application DLLs

• Dependencies (MSVCR71, MSXML, or other components specific to your project)

• Server response files

• Discovery documents

• HTML pages, style sheets, images, and other content

Copy the files and dependencies to an appropriate location on the target computer.

You can use multiple folders to store your files so that you can configure different permissions for each folder. It can be worthwhile to store static content (HTML pages, style sheets, images), server response files, and DLLs in three or more different folders.

Because some DLLs (such as XML Web service DLLs) are accessed directly by the user, while others (such as Web application DLLs that are only used by server response files) are not be accessed in this way, you might find site management simpler if each of these categories has its own folder.

Whatever folder structure you choose, you need to be sure that the relative and absolute paths used in your files are correct. In particular, you need to be sure that the handler tags in your server response files point to the correct locations.

Set NTFS file security settings appropriately. For information about the security contexts used in a typical ATL Server application or XML Web service, see ATL Server Security.

Start Internet Services Manager (for example, on the Start menu, click Programs, click Administrative Tools, and then click Internet Services Manager).

Choose a Web site on which to install your application. Typically, this will be the Default Web Site.

Right-click the site, click New, and then click Virtual Directory.

In the Alias box, enter a name for the virtual directory.

Select the folder used in step 2 as the Web Site Content Directory for this new virtual directory.

Give the new directory Run scripts, and then Execute permissions.

This assumes the directory only contains server response files and XML Web service DLLs. In general, follow these guidelines for giving permissions to your directories:

• Give Read permissions if the directory contains static content (such as HTML pages, style sheets, images, and other content).

• Give permissions to Run scripts if the directory contains server response files and the ISAPI extension is registered as a script engine. It is not necessary or desirable to give Read permissions.

• Give Execute permissions if the directory contains server response files and the ISAPI extension is not registered as a script engine or the directory contains XML Web service or Web application DLLs that will be accessed directly by the user. It is not necessary or desirable to give Read permissions.

• If the directory contains DLLs and other files that are never to be accessed directly by the user of the Web site, disable Read, Run scripts, and Execute permissions. These DLLs can still be called from server response files or used from code, but they cannot be called or downloaded directly by users of the Web site.

Click Next, and then click Finish to end the wizard and create the virtual directory.

Right-click the newly created virtual directory, and then select Properties.

Click the Configuration button on the Virtual Directory page of the Properties dialog box.

Use the App Mappings page of the Application Configuration dialog box to register your ISAPI extension DLL as the handler for DLLs and server response files as described in Associating SRF Files with Your ISAPI DLL by Hand.

You do not need to register the ISAPI extension as the handler for a file extension if you never use it. If you only allow users to access your site using server response files, you do not need to register the ISAPI extension as the handler for DLLs. If you only provide XML Web services that are accessible directly as DLLs, you do not need to register the ISAPI extension as the handler for server response files.

Optional. Set Application Protection to an appropriate level.

Optional. Set the appropriate default documents on the Documents page.

Optional. On the Directory Security page, set the appropriate security for your application.

Optional. Configure other settings using Internet Services Manager.