all groups > iis security > november 2003 > threads for november 8 - 14, 2003
Filter by week: 1 2 3 4 5
Certificate Server on Windows XP
Posted by Brian Delahunty at 11/14/2003 5:25:42 PM
Hey,
Does anybody know if MS Certificate Server will install on an XP Pro box or
if there is some other CA software that I can use to install on an XP Box.
Brian
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.538 / Vi... more >>
Client Certificates Deleted after 2003 upgrade.
Posted by rlasker3 at 11/14/2003 4:47:57 PM
I have a Enterprise Root CA on a separate machine from IIS. After upgrading
to 2003 it was working fine for about two days. Today I went to access the
site and it told me that the Client Certificate that I've been using to
access the secure site has been revoked.
When I loged into the Root CA ... more >>
WebSphere-> IIS (Single sign-on)
Posted by Walter Biffi at 11/14/2003 4:26:05 PM
I want to have Integrated Windows authentication. However, I would like to be able to trap the error coming back from IIS, when a user connecting to the site does not get authenticated.
I would than like to connect to a database and check the user’ ID, and if it exists take the password and log t... more >>
SSL Question
Posted by Mark at 11/14/2003 3:44:58 PM
Can I setup SSL without an SSL certificate? I need to setup SSL for other
purposes than security.
... more >>
Problem after installing SUS Server on SPSv1 SP2 Server
Posted by Phil at 11/14/2003 3:29:41 PM
Hi everybody !!
I've just installed SUS Server on my SPS v1 SP2 server (due to a lack of
money, couldn't do it on a dedicated server) and noticed that I can no
longer log on my SPS server !
I've noticed the explanation in the Deployment Guide SP1 from SUS about how
to workaround this issu... more >>
401 error requires browser restart for unrestricted pages
Posted by Dale Sundstrom at 11/14/2003 2:55:56 PM
After failing to logon to a restricted directory of a
website (http://website/restricted), IE will continue to
prompt for a login for unrestricted pages such as the
website's home page (http://website) until IE is restarted.
For example, visiting a website's homepage
(http://website) and ... more >>
multiple directory security setting for one website
Posted by Scott Bunting at 11/14/2003 2:03:41 PM
Is there a way to configure security on a website to require one set of
users to login and not others? In other words, can you set anonymous access
for one set of ip ranges and basic authentication for another?
Thanks,
Scott
... more >>
IIS / NTFS permissions
Posted by Richard at 11/14/2003 12:49:52 PM
Hello,
We have an administration website configured in IIS with
anonymous turned off, and digest authentication turned on.
On the web folders (\www), we have explicitly set our user
permissions and groups that we want to allow access.
However, IIS still lets anyone who successfully
au... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
always dual entries in IIS Log with first being HTTP 401.2 error
Posted by Michael Chen at 11/14/2003 11:27:38 AM
We noticed that, in our web log, every single request has
2 entries. The first one always logged in cs-username, sc-
status, sc-substatus, and sc-win32-status as -, 401, 2,
and 2148074254, respectively. The second one logged
user's windows account, 200, 0, 0 in the corresponding
fields, res... more >>
Problems with IIS 6
Posted by tommasop at 11/14/2003 5:51:05 AM
Hi, i had a wonderful e-learning site on Windows 2000 and IIS 5 and I decided to migrate it to Windows 2003 and IIS 6
It is developed in ASP so everything was quite smooth
Now I have two main problems
1. I used and use a third party app for uploading of files (w3.upload) but now whenever I try... more >>
Normal AOL proxy behavior or DOS attack?
Posted by ja at 11/13/2003 7:58:28 PM
Noticed a funny behavior in my IIS log files.
It seems a request for one webpage is showing as coming from 6 different IP
addresses.
pic1 on webpage requested by 1 IP, pic2 on the same page by another IP and
pic3 by a third IP etc. etc.
All IPs are AOL proxy IPs:
198.81.26.44
198.81.26.10... more >>
Problems with IIS6 and ASP and COM+
Posted by jokes54321 at 11/13/2003 5:13:06 PM
I posted this question earlier and apologize for posting it again but the
problem is slightly different being I started over.
1) I setup a new webserver with Windows 2000 and IIS 5.
2) Copied over our web pages from the server we want to retire
3) Created the website in the IIS admin
... more >>
SSL Setup
Posted by Mark at 11/13/2003 4:30:36 PM
I am tryuing to know how to setup SSL on windows 2000 and IIS 5 machine.
Is there an article that describes how to setup SSL?
Do I have to buy a certificate? If not then how can I create my own
certificate?
Thank you in advance.
... more >>
Creating a Default Web site
Posted by J.P. Cahill at 11/13/2003 2:14:32 PM
I installed IIS, but for some reason it did not create a
default website. I now have Exchange and CRM installed
and they are looking for the default website. Can I
create the website without having to reinstall IIS and
therefor having to reinstall exchange & CRM?
Your help is greatly ap... more >>
SBS 2000 + ASP.NET 1.1 + IIS Lockdown not working.
Posted by Douglas J. Badin at 11/13/2003 12:22:58 PM
When I apply IIS Lockdown to SBS 2000 + ASP.NET 1.1 I run into NTFS
persmission issues with the IWAM_computername user account, i.e. csc.exe.
I tried using the Dynamic Web template and the SBS template with IIS
lockdown but both had the same issues. I
Is there an existing template to make t... more >>
outlook express denies access to attachments
Posted by brian at 11/13/2003 11:37:11 AM
everytime i receive an email attachment i get a message
that- oe has removed access to this attachment. how do i
disable this feature?... more >>
password prompt on unprotected page
Posted by andy davis at 11/13/2003 9:07:58 AM
User gets password prompt when he clicks on any link on
unprotected page. If he clicks cancel in the password
prompt window, the requested page is served, however, then
he gets password prompts again when he clicks on any link
of this unprotected page. He clicks cancel.....ad naseum.... more >>
SSL Setup for Load-Balanced Web Farm
Posted by Quick Question at 11/13/2003 7:56:13 AM
Hello,
I have a quick question -
In order to use SSL for a site running on a webfarm w/ NLB - do I need to have Server Affinity activated? I don't want a new ssl "handshake"/certificate to be performed on every request. So, what configuration would I need to use in my application to disabl... more >>
FTP instructions
Posted by nick at 11/13/2003 7:47:11 AM
aanyone got a link to guide to setting up secure FTP
sites?
Cheers... more >>
Trusted Sites
Posted by Tariq at 11/13/2003 7:33:41 AM
I am receiving an error message when attempting to add a
Trusted Site, stating that the site already exists in
another zone, but all the other zones are empty help
anyone?... more >>
Web root idiot
Posted by gregfocker NO[at]SPAM earthlink.net at 11/13/2003 1:50:31 AM
Using Windows XP Pro, I set up a virtual drive, P:, using SUBST that
points to C:\projects, such that C:\projects\mysolution\webroot
appears as P:\mysolution\webroot on the virtual drive.
When I assign P:\mysolution\webroot as the home directory in IIS for
my computer's default web site, I am ... more >>
IUSR_computerName account - differences 2000 and 2003
Posted by Eoin Mooney at 11/13/2003 1:25:57 AM
We have an issue trying to run our application [web based]
on the new Win 2003/ADAM setup. We currently use W2K/AD
and have no problems at the moment.
Our main issue is when we try and schedule an event on MS
scheduler through a browser . We cannot actually do this
on Win 2003/ADAM .
W... more >>
IIS Problems In Windows XP Pro
Posted by PatK100 at 11/12/2003 9:12:04 PM
Hi,
I have a problem with my WIndows XP Pro with SP1, everytime I install IIS it
causes everything to hang, when then uninstall IIS everything works again.
Anyone ever seen a problem like this before, can't seem to fine any related
information on the Microsoft sites to help.
Please email ... more >>
Spyware notification
Posted by Mike Malley at 11/12/2003 7:32:26 PM
I received a notification from Microsoft that they
detected spyware was attached to my computer. The way my
computer is configured I can not connect to the internet
with the dial up that is presented when I hit a hot link
if I am not already connected to the internet. I need the
hot link... more >>
SSL setup
Posted by Thomas Kryton at 11/12/2003 3:06:13 PM
I've recently installed a Stand Alone Certificate
Authority on a test machine running Windows 2000 server
with Internet Information Services. Installed the
certificate and applied the permissions to a directory
setting 'require secure channel.' When I view the page
using http:// I get the ... more >>
IIS6 First Site setup - HTTP 500 Internal server error
Posted by dogrady NO[at]SPAM my-deja.com at 11/12/2003 2:42:41 PM
Hi folks
We're moving our site onto an IIS6 box. It is primarily .asp based.
In 'Web Service Extensions' I have set ASP to allowed. ASP.NET is not
installed.
The index files are index.asp or default.asp (still testing) but
neither works (I get the HTTP 500 error above). If I type the full
... more >>
WebDAV Authenticaion
Posted by Matt at 11/12/2003 1:19:54 PM
I have setup a WebDAV directory on IIS 5.1 using Basic
Authentication. (Beautiful). However, when I save a new
file to the folder and go to open this file from the
directory, it prompts me again for Username/Password. I
enter the username/password and it opens fine. However,
should it ... more >>
DCOM Event 10010
Posted by Dan Cathers at 11/12/2003 10:48:15 AM
The proposed resolution to this problem is to
add "Authenticated Users" and "INTERACTIVE" into the
local "Users" group. Both of these were already in
the "Users" group. When I deleted them, added them back
in, and restarted IIS, nothing changed. What else can I
try to get the ASP pages ... more >>
SSL implemenation in ASP
Posted by hrishikesh musale at 11/11/2003 10:20:24 PM
hey i want to implement SSL in my current website
i know how to implement payment gateway also(certificate genertation
etc)
can you tell me what kind of things required in ASP page also along with
IIS settings?
any URL will also do
Thanks and regards
hrishikesh
*** Sent via Devel... more >>
where to setup URLScan in IIS6 ?
Posted by Come2 at 11/11/2003 10:13:43 PM
As I know the URLScan were include in IIS6.
But where can I edit it? Like before URLScan 2.5 & IIS5 that I can edit the
urlscan.
Thank you for your reply!
... more >>
Content advisor
Posted by Chrystal at 11/11/2003 5:06:59 PM
I'm mot sure if I am in the right area. I recently got a
used computer. Who ever had it had the content advisor
activated. How can I turn it off? I can't acess anything
right now on that system. Any ideas?... more >>
Generate a self Signed Certificate in IIS 5.0
Posted by DougG at 11/11/2003 8:59:54 AM
How do you generate a Self Signed Certificate in IIS 5.0?... more >>
Sudden problems with ActiveX components on IIS 6?
Posted by Lior at 11/11/2003 8:37:06 AM
Hi,
We have moved to host our site on IIS 6. Some web pages use a server-side
ActiveX. While on IIS 5 it worked flawlessly, here - ocaasionaly but
suddenly - it stops working! After restart for the IIS all is well again.
What can it be?
Any ideas?
Thanks,
Lior
... more >>
ActiveX control
Posted by tyork at 11/11/2003 5:57:53 AM
When I tries to open some video by using ActiveX control,
I have a message that says your security setting prevents
ActiveX control and your web page won't display correctly
and I have only a red X mark. I contacted with the site
Tech help and told me to check if the security setting
was m... more >>
IIS 5 User Properties/User must change password at next login
Posted by bacile99 NO[at]SPAM yahoo.com at 11/11/2003 4:48:41 AM
I had an odd thing happen and I don't know why. All the users within
a group had their Password settings changed to "User must change
password at next login". Previously this was not used. Sometime over
the past three of four days this setting was changed. But it only
affected users within 1... more >>
Win2K Advanced Server/IIS5 and SSL - Which trusted root certs can safely be deleted?
Posted by Ohaya at 11/10/2003 6:41:03 PM
Hi,
We're setting up a web server on Win2K Advanced Server/IIS5 with client
and server authentication, and we want to use client authentication as a
mechanism for allowing/preventing users access.
This machine will also be a Domain Controller.
I know that we can create CTLs, and that wi... more >>
IE 6 internet tools
Posted by vision at 11/10/2003 3:11:05 PM
Someone hacked into my system and changed my internet options for IE 6. I am unable to change my default page or delete temp file or any other thing that falls under the Internet Options Tools bar. I am getting a warning that says "This operations has been cancelled due to restrictions in effect o... more >>
ftp server 2003
Posted by Mark at 11/10/2003 2:56:58 PM
In setting up the ftp service when I run a test with a created user I get a
user cannot log in. home directory inaccessible. Any help would be
appreciated. I have created rights to the folder for the person who
supposed to able to connect
... more >>
Remote Virtual Directory
Posted by coder5811 NO[at]SPAM yahoo.com at 11/10/2003 2:22:31 PM
Hi,
Is it possible to have a remote virtual directory when you are using asp.net
If so, how? How does the security in the config files need to be setup.
- thanks... more >>
setting up one ssl website that houses mulitple websites with only port numbers
Posted by krovn NO[at]SPAM yahoo.com at 11/10/2003 8:14:06 AM
HI
I am working on an NT server/iis 4.0, I am trying to install a
certificate for one website. However on this server it houses multiple
websites that do not have assigned ipaddress in iis but instead port
numbers. For example internal server http://krugger:90. When I follow
instructions t... more >>
IIS authentication to domain? from DMZ
Posted by IJCHASE at 11/9/2003 11:53:26 PM
Hi,
I have been tasked to build a machine in the DMZ that will be a stand alone
server, but will talk to an SQL server back in the domain through a back-end
firewall. As the IIS machine is standalone... how can I get it to ask for
authentication against the user accounts in the Domain? They need... more >>
Losing Anonymous authentication in IIS
Posted by Dennis at 11/9/2003 10:32:56 PM
I have an odd problem..
When I startup the server (its a domain member, but not a DC) everything is
fine, about 4 or 6 hours later, you can not open a web site hosted on the
box because its lost the IUSR_XXX authentication. In IIS5, to get around
this, I let IIS control the IUSR account, but ... more >>
IIS 5.0 integrated windows auth trouble...
Posted by David Levine at 11/8/2003 11:39:51 AM
Hi all-
I am a little stumped. I have a site on a Win2k IIS
server that I would like to use integrated windows
authentication with. Pretty simple. This site is the only
one being hosted on the server and is to be used as an
intranet site. The trouble I am having is that when a
user type... more >>
spyware?
Posted by Mike Deswert at 11/8/2003 11:35:37 AM
what is the best spyware available for the casual user of
the internet for making purchases who's concerned about
identity fraud.??
Thanks in advance for your advice!
Mike... more >>
Exploroer 6 problems
Posted by rich49 NO[at]SPAM usa.com at 11/8/2003 8:42:42 AM
Windows XP Pro
When I log on as a user, a command windows popup for a few
seconds and then drop off. This started after being on the
internet and a virus warning pop that Win32.Sinit.Trojan
file was on my computer. I ran the virus scan and it
delete the file.
Than when I log back on t... more >>
No Windows Updates for IIS 5.1
Posted by tom at 11/8/2003 2:21:37 AM
hi,
I just installed Windows XP with IIS on 2 machines. Both
times, Windows Update listed no available patches for
IIS. How can this happen? As a result I was infected
multiple times with virus within seconds when connected
to the internet. Anybody an idea why Windows Update did
not det... more >>
|