How Letsencrypt work for windows IIS?

To add to what @molyfra said, there will most likely be a DNS-based challenge in the future, which should make it easier to get certificates for internal services.