Since Apache::Session works just fine without ANY webserver, you should have no problem with IIS. :-)

I've looked at CGI::Session, and I like some of the additional features, but Apache::Session works for me, so I've continued to use it for all my projects requiring session management.