How to Set Up an Internal IntranetDeploying an intranet in a bank or credit union environment means meeting strict security, access control, and audit-readiness standards. This guide walks IT teams through setting up a secure, internal intranet (behind your firewall) using Microsoft IIS. Step #1: Install Web Server (IIS) Role on Windows Server- Navigate to Server Manager, click on Dashboard on the left side, and then click Add roles and features on the right.
- Click the Next > button.
- Choose Role-based or feature-based installation and click the Next > button.
- Select appropriate server (usually the default) and click the Next > button.
- Select Web Server (IIS).
- Include management console if prompted, and click the Add Features button.
- Click the Next > button.
- Unless the SMTP Service is needed (manually sending email, see Azure App Registration to use Office 365), the default selection is sufficient (Latest .NET Framework Features, User Interfaces and Infrastructure, Windows PowerShell, and WoW64 Support).
- Click the Next > button.
- Expand Application Development by clicking the corresponding arrow icon, then select an option (often the newest ASP.NET option and/or ASP).
- Ensure Include management tools (if applicable) is checked, and click the Add Features button.
- If ISAPI Extensions isn't already checked by default, select it.
- Click the Install button.
- Once the process is complete, click the Close button.
Step #2: Configure Web Site- In Server Manager - from the menu on the top right - click Tools and select Internet Information Services (IIS) Manager.
- Expand the server name on the left side (arrow icon), followed by Sites (arrow icon), then click Default Web Site.
- Some auditors and examiners suggest disabled the Default Web Site, so use your own discretion (if so, just right click on Sites to add a new one).
- After selecting your site, click the Advanced Settings link on the right, then make a note of the Application Pool (usually it's Default App Pool).
- Click Application Pool on the left side, select the Application Pool noted above, and click the Advanced Settings link on the right.
- If you plan to sync to Active Directory On-Premise, then Select the "Identity" option, and click the ... button to change, and - when prompted - When prompted, choose NetworkService from the Built-in account dropdown selection, and click the OK button.
- Make sure the Physical Path points to the location you desire; this is where your web site files go. The default is c:\inetpub\wwwroot\
Step #3: Configure SSL Certificate and BindingAuditors and examiners most often suggest using https:// to access the site; Click here for SSL Certificate options. Step #4: Redirect HTTP Traffic to HTTPSTo prevent http:// from accidentally being used, you can force https
Common Questions
Can I host an intranet internally without cloud services?
Yes. You can deploy SimplifyIT's intranet platform on-premise using IIS and SQL Server, completely behind your firewall. This setup is often preferred by banks and credit unions with strict internal control requirements.
Do I need Active Directory or Entra ID to run the intranet?
No, but integration is available. You can sync users from Active Directory or Entra ID to simplify login and permissions. It's optional, not required.
Will I need an SSL certificate even if the site is internal?
Yes. Auditors and regulators (FDIC/NCUA) strongly prefer SSL encryption, even on internal-only sites. It also helps prevent mixed content errors when embedding external content like maps or videos.
Can I restrict intranet access to certain users or devices?
Yes. You can enforce access by IP address, AD group, or role-based permissions inside the intranet platform. This is especially useful for vendor portals, HR content, or management-only files.
What kind of compliance features should my intranet include?
Look for audit trails, version control, content approvals, role-based access, and optional MFA integration. These support FDIC, NCUA, and internal audit expectations.
What should I set for the Application Pool identity?
If your intranet needs to sync with Active Directory, use the built-in 'NetworkService' account for the Application Pool. This allows secure access to domain resources without hardcoding credentials.
Security & Compliance SuggestionsDon't Want To Start from Scratch?Reach out to our team or watch a demo to see a fully-deployed intranet in action. |
Published July 21, 2025
Examiners are looking closely at vendor management practices during audits. Learn what your bank needs to show to stay compliant, including risk assessments, SOC reports, and review cycles.
Published July 18, 2025
Posting a policy isn't enough. Here's how financial institutions use intranet indicators and audit trails to ensure staff visibility, action, and compliance follow-through.
Published July 17, 2025
The right intranet can transform internal communication and compliance for banks and credit unions. Here's what financial institutions should expect from a modern intranet platform.
|
