It's possible to run bugzilla under IIS 5.0 and 6.0, i.e. Apache not needed (but it's easier to set up under Apache). The security of IIS 6.0 makes it harder to set up. I did it once but don't have the instructions I wrote (I left the company I did it for), and would struggle to remember them. The fact that it's written in Perl shouldn't matter to you unless you plan to modify the code and can't bear the thought of working with Perl. I've found bugzilla to be a good tool - it satisfied my requirements and didn't cause any trouble.