Groups | Blog | Home


Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > iis security > november 2003 > threads for november 8 - 14, 2003

Filter by week: 1 2 3 4 5

Certificate Server on Windows XP
Posted by Brian Delahunty at 11/14/2003 5:25:42 PM
Hey, Does anybody know if MS Certificate Server will install on an XP Pro box or if there is some other CA software that I can use to install on an XP Box. Brian --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.538 / Vi...more >>


Client Certificates Deleted after 2003 upgrade.
Posted by rlasker3 at 11/14/2003 4:47:57 PM
I have a Enterprise Root CA on a separate machine from IIS. After upgrading to 2003 it was working fine for about two days. Today I went to access the site and it told me that the Client Certificate that I've been using to access the secure site has been revoked. When I loged into the Root CA ...more >>

WebSphere-> IIS (Single sign-on)
Posted by Walter Biffi at 11/14/2003 4:26:05 PM
I want to have Integrated Windows authentication. However, I would like to be able to trap the error coming back from IIS, when a user connecting to the site does not get authenticated. I would than like to connect to a database and check the user’ ID, and if it exists take the password and log t...more >>

SSL Question
Posted by Mark at 11/14/2003 3:44:58 PM
Can I setup SSL without an SSL certificate? I need to setup SSL for other purposes than security. ...more >>

Problem after installing SUS Server on SPSv1 SP2 Server
Posted by Phil at 11/14/2003 3:29:41 PM
Hi everybody !! I've just installed SUS Server on my SPS v1 SP2 server (due to a lack of money, couldn't do it on a dedicated server) and noticed that I can no longer log on my SPS server ! I've noticed the explanation in the Deployment Guide SP1 from SUS about how to workaround this issu...more >>

401 error requires browser restart for unrestricted pages
Posted by Dale Sundstrom at 11/14/2003 2:55:56 PM
After failing to logon to a restricted directory of a website (http://website/restricted), IE will continue to prompt for a login for unrestricted pages such as the website's home page (http://website) until IE is restarted. For example, visiting a website's homepage (http://website) and ...more >>

multiple directory security setting for one website
Posted by Scott Bunting at 11/14/2003 2:03:41 PM
Is there a way to configure security on a website to require one set of users to login and not others? In other words, can you set anonymous access for one set of ip ranges and basic authentication for another? Thanks, Scott ...more >>

IIS / NTFS permissions
Posted by Richard at 11/14/2003 12:49:52 PM
Hello, We have an administration website configured in IIS with anonymous turned off, and digest authentication turned on. On the web folders (\www), we have explicitly set our user permissions and groups that we want to allow access. However, IIS still lets anyone who successfully au...more >>



always dual entries in IIS Log with first being HTTP 401.2 error
Posted by Michael Chen at 11/14/2003 11:27:38 AM
We noticed that, in our web log, every single request has 2 entries. The first one always logged in cs-username, sc- status, sc-substatus, and sc-win32-status as -, 401, 2, and 2148074254, respectively. The second one logged user's windows account, 200, 0, 0 in the corresponding fields, res...more >>

Problems with IIS 6
Posted by tommasop at 11/14/2003 5:51:05 AM
Hi, i had a wonderful e-learning site on Windows 2000 and IIS 5 and I decided to migrate it to Windows 2003 and IIS 6 It is developed in ASP so everything was quite smooth Now I have two main problems 1. I used and use a third party app for uploading of files (w3.upload) but now whenever I try...more >>

Normal AOL proxy behavior or DOS attack?
Posted by ja at 11/13/2003 7:58:28 PM
Noticed a funny behavior in my IIS log files. It seems a request for one webpage is showing as coming from 6 different IP addresses. pic1 on webpage requested by 1 IP, pic2 on the same page by another IP and pic3 by a third IP etc. etc. All IPs are AOL proxy IPs: 198.81.26.44 198.81.26.10...more >>

Problems with IIS6 and ASP and COM+
Posted by jokes54321 at 11/13/2003 5:13:06 PM
I posted this question earlier and apologize for posting it again but the problem is slightly different being I started over. 1) I setup a new webserver with Windows 2000 and IIS 5. 2) Copied over our web pages from the server we want to retire 3) Created the website in the IIS admin ...more >>

SSL Setup
Posted by Mark at 11/13/2003 4:30:36 PM
I am tryuing to know how to setup SSL on windows 2000 and IIS 5 machine. Is there an article that describes how to setup SSL? Do I have to buy a certificate? If not then how can I create my own certificate? Thank you in advance. ...more >>

Creating a Default Web site
Posted by J.P. Cahill at 11/13/2003 2:14:32 PM
I installed IIS, but for some reason it did not create a default website. I now have Exchange and CRM installed and they are looking for the default website. Can I create the website without having to reinstall IIS and therefor having to reinstall exchange & CRM? Your help is greatly ap...more >>

SBS 2000 + ASP.NET 1.1 + IIS Lockdown not working.
Posted by Douglas J. Badin at 11/13/2003 12:22:58 PM
When I apply IIS Lockdown to SBS 2000 + ASP.NET 1.1 I run into NTFS persmission issues with the IWAM_computername user account, i.e. csc.exe. I tried using the Dynamic Web template and the SBS template with IIS lockdown but both had the same issues. I Is there an existing template to make t...more >>

outlook express denies access to attachments
Posted by brian at 11/13/2003 11:37:11 AM
everytime i receive an email attachment i get a message that- oe has removed access to this attachment. how do i disable this feature?...more >>

password prompt on unprotected page
Posted by andy davis at 11/13/2003 9:07:58 AM
User gets password prompt when he clicks on any link on unprotected page. If he clicks cancel in the password prompt window, the requested page is served, however, then he gets password prompts again when he clicks on any link of this unprotected page. He clicks cancel.....ad naseum....more >>

SSL Setup for Load-Balanced Web Farm
Posted by Quick Question at 11/13/2003 7:56:13 AM
Hello, I have a quick question - In order to use SSL for a site running on a webfarm w/ NLB - do I need to have Server Affinity activated? I don't want a new ssl "handshake"/certificate to be performed on every request. So, what configuration would I need to use in my application to disabl...more >>

FTP instructions
Posted by nick at 11/13/2003 7:47:11 AM
aanyone got a link to guide to setting up secure FTP sites? Cheers...more >>

Trusted Sites
Posted by Tariq at 11/13/2003 7:33:41 AM
I am receiving an error message when attempting to add a Trusted Site, stating that the site already exists in another zone, but all the other zones are empty help anyone?...more >>

Web root idiot
Posted by gregfocker NO[at]SPAM earthlink.net at 11/13/2003 1:50:31 AM
Using Windows XP Pro, I set up a virtual drive, P:, using SUBST that points to C:\projects, such that C:\projects\mysolution\webroot appears as P:\mysolution\webroot on the virtual drive. When I assign P:\mysolution\webroot as the home directory in IIS for my computer's default web site, I am ...more >>

IUSR_computerName account - differences 2000 and 2003
Posted by Eoin Mooney at 11/13/2003 1:25:57 AM
We have an issue trying to run our application [web based] on the new Win 2003/ADAM setup. We currently use W2K/AD and have no problems at the moment. Our main issue is when we try and schedule an event on MS scheduler through a browser . We cannot actually do this on Win 2003/ADAM . W...more >>

IIS Problems In Windows XP Pro
Posted by PatK100 at 11/12/2003 9:12:04 PM
Hi, I have a problem with my WIndows XP Pro with SP1, everytime I install IIS it causes everything to hang, when then uninstall IIS everything works again. Anyone ever seen a problem like this before, can't seem to fine any related information on the Microsoft sites to help. Please email ...more >>

Spyware notification
Posted by Mike Malley at 11/12/2003 7:32:26 PM
I received a notification from Microsoft that they detected spyware was attached to my computer. The way my computer is configured I can not connect to the internet with the dial up that is presented when I hit a hot link if I am not already connected to the internet. I need the hot link...more >>

SSL setup
Posted by Thomas Kryton at 11/12/2003 3:06:13 PM
I've recently installed a Stand Alone Certificate Authority on a test machine running Windows 2000 server with Internet Information Services. Installed the certificate and applied the permissions to a directory setting 'require secure channel.' When I view the page using http:// I get the ...more >>

IIS6 First Site setup - HTTP 500 Internal server error
Posted by dogrady NO[at]SPAM my-deja.com at 11/12/2003 2:42:41 PM
Hi folks We're moving our site onto an IIS6 box. It is primarily .asp based. In 'Web Service Extensions' I have set ASP to allowed. ASP.NET is not installed. The index files are index.asp or default.asp (still testing) but neither works (I get the HTTP 500 error above). If I type the full ...more >>

WebDAV Authenticaion
Posted by Matt at 11/12/2003 1:19:54 PM
I have setup a WebDAV directory on IIS 5.1 using Basic Authentication. (Beautiful). However, when I save a new file to the folder and go to open this file from the directory, it prompts me again for Username/Password. I enter the username/password and it opens fine. However, should it ...more >>

DCOM Event 10010
Posted by Dan Cathers at 11/12/2003 10:48:15 AM
The proposed resolution to this problem is to add "Authenticated Users" and "INTERACTIVE" into the local "Users" group. Both of these were already in the "Users" group. When I deleted them, added them back in, and restarted IIS, nothing changed. What else can I try to get the ASP pages ...more >>

SSL implemenation in ASP
Posted by hrishikesh musale at 11/11/2003 10:20:24 PM
hey i want to implement SSL in my current website i know how to implement payment gateway also(certificate genertation etc) can you tell me what kind of things required in ASP page also along with IIS settings? any URL will also do Thanks and regards hrishikesh *** Sent via Devel...more >>

where to setup URLScan in IIS6 ?
Posted by Come2 at 11/11/2003 10:13:43 PM
As I know the URLScan were include in IIS6. But where can I edit it? Like before URLScan 2.5 & IIS5 that I can edit the urlscan. Thank you for your reply! ...more >>

Content advisor
Posted by Chrystal at 11/11/2003 5:06:59 PM
I'm mot sure if I am in the right area. I recently got a used computer. Who ever had it had the content advisor activated. How can I turn it off? I can't acess anything right now on that system. Any ideas?...more >>

Generate a self Signed Certificate in IIS 5.0
Posted by DougG at 11/11/2003 8:59:54 AM
How do you generate a Self Signed Certificate in IIS 5.0?...more >>

Sudden problems with ActiveX components on IIS 6?
Posted by Lior at 11/11/2003 8:37:06 AM
Hi, We have moved to host our site on IIS 6. Some web pages use a server-side ActiveX. While on IIS 5 it worked flawlessly, here - ocaasionaly but suddenly - it stops working! After restart for the IIS all is well again. What can it be? Any ideas? Thanks, Lior ...more >>

ActiveX control
Posted by tyork at 11/11/2003 5:57:53 AM
When I tries to open some video by using ActiveX control, I have a message that says your security setting prevents ActiveX control and your web page won't display correctly and I have only a red X mark. I contacted with the site Tech help and told me to check if the security setting was m...more >>

IIS 5 User Properties/User must change password at next login
Posted by bacile99 NO[at]SPAM yahoo.com at 11/11/2003 4:48:41 AM
I had an odd thing happen and I don't know why. All the users within a group had their Password settings changed to "User must change password at next login". Previously this was not used. Sometime over the past three of four days this setting was changed. But it only affected users within 1...more >>

Win2K Advanced Server/IIS5 and SSL - Which trusted root certs can safely be deleted?
Posted by Ohaya at 11/10/2003 6:41:03 PM
Hi, We're setting up a web server on Win2K Advanced Server/IIS5 with client and server authentication, and we want to use client authentication as a mechanism for allowing/preventing users access. This machine will also be a Domain Controller. I know that we can create CTLs, and that wi...more >>

IE 6 internet tools
Posted by vision at 11/10/2003 3:11:05 PM
Someone hacked into my system and changed my internet options for IE 6. I am unable to change my default page or delete temp file or any other thing that falls under the Internet Options Tools bar. I am getting a warning that says "This operations has been cancelled due to restrictions in effect o...more >>

ftp server 2003
Posted by Mark at 11/10/2003 2:56:58 PM
In setting up the ftp service when I run a test with a created user I get a user cannot log in. home directory inaccessible. Any help would be appreciated. I have created rights to the folder for the person who supposed to able to connect ...more >>

Remote Virtual Directory
Posted by coder5811 NO[at]SPAM yahoo.com at 11/10/2003 2:22:31 PM
Hi, Is it possible to have a remote virtual directory when you are using asp.net If so, how? How does the security in the config files need to be setup. - thanks...more >>

setting up one ssl website that houses mulitple websites with only port numbers
Posted by krovn NO[at]SPAM yahoo.com at 11/10/2003 8:14:06 AM
HI I am working on an NT server/iis 4.0, I am trying to install a certificate for one website. However on this server it houses multiple websites that do not have assigned ipaddress in iis but instead port numbers. For example internal server http://krugger:90. When I follow instructions t...more >>

IIS authentication to domain? from DMZ
Posted by IJCHASE at 11/9/2003 11:53:26 PM
Hi, I have been tasked to build a machine in the DMZ that will be a stand alone server, but will talk to an SQL server back in the domain through a back-end firewall. As the IIS machine is standalone... how can I get it to ask for authentication against the user accounts in the Domain? They need...more >>

Losing Anonymous authentication in IIS
Posted by Dennis at 11/9/2003 10:32:56 PM
I have an odd problem.. When I startup the server (its a domain member, but not a DC) everything is fine, about 4 or 6 hours later, you can not open a web site hosted on the box because its lost the IUSR_XXX authentication. In IIS5, to get around this, I let IIS control the IUSR account, but ...more >>

IIS 5.0 integrated windows auth trouble...
Posted by David Levine at 11/8/2003 11:39:51 AM
Hi all- I am a little stumped. I have a site on a Win2k IIS server that I would like to use integrated windows authentication with. Pretty simple. This site is the only one being hosted on the server and is to be used as an intranet site. The trouble I am having is that when a user type...more >>

spyware?
Posted by Mike Deswert at 11/8/2003 11:35:37 AM
what is the best spyware available for the casual user of the internet for making purchases who's concerned about identity fraud.?? Thanks in advance for your advice! Mike...more >>

Exploroer 6 problems
Posted by rich49 NO[at]SPAM usa.com at 11/8/2003 8:42:42 AM
Windows XP Pro When I log on as a user, a command windows popup for a few seconds and then drop off. This started after being on the internet and a virus warning pop that Win32.Sinit.Trojan file was on my computer. I ran the virus scan and it delete the file. Than when I log back on t...more >>

No Windows Updates for IIS 5.1
Posted by tom at 11/8/2003 2:21:37 AM
hi, I just installed Windows XP with IIS on 2 machines. Both times, Windows Update listed no available patches for IIS. How can this happen? As a result I was infected multiple times with virus within seconds when connected to the internet. Anybody an idea why Windows Update did not det...more >>


DevelopmentNow Blog