Groups | Blog | Home


Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008


all groups > iis security > july 2003 > threads for july 1 - 7, 2003

Filter by week: 1 2 3 4 5

IIS and Front Page
Posted by Tom Kiame at 7/7/2003 11:04:07 PM
Hi, How i can disable "Edit with MS Front Page" in Internet Explorer? i am having IIS4 and .asp files web site? some of the users use it to modify the web content without permisions. thanks Tom ...more >>

Metabase
Posted by Martin Rösler at 7/7/2003 9:32:40 PM
Hi all, is there a way to change the banner (connection string) of iis5? I know how to do this for the smtp service, but i don`t find anything for the W3svc. Any Idea!? Thx, Martin ...more >>

128 bit Encryption
Posted by Jim Matthews at 7/7/2003 10:36:57 AM
I recently installed an SSL certificate for use with Exchange 2000 Outlook Web Access As all my users are on IE 6, I also invoked the "Require 128 bit encryption" But one of my users was still unable to access it, getting a message to the effect that the site requires a higher level of encry...more >>

can't rename dir in IIS or through explorer
Posted by rob sullivan at 7/7/2003 10:35:52 AM
I need to rename/delete a directory in a site hosted in IIS5. It's on a shared server, a subdir of the document root. I stop the site in IIS and try to rename it, but on the hd and in IIS, but I can't, getting this error: Cannot rename [DIRNAME]: Access is denied. Make sure that the ...more >>

All Accounts Disabled - Hacked
Posted by jordan at 7/7/2003 9:36:41 AM
So, I must've been hacked on Sunday, becuase all my local server accounts were disabled. Now, I'm trying to get our site back online, but re-enabling these accounts had no effect. Anybody out there know the steps to fix the settings the hackers changed? I'm frantically searching for things t...more >>

secure sites
Posted by Jesus Herrera at 7/7/2003 6:41:33 AM
I'm trying to sign on some secure websites like ARMY PERSONNEL COMMAND and ARMY kNOWLEDGE ONLINE and I am unable to do it. My computer has 128 bit. If I need more than that to be able to sign on this websites, how do I get more? If I have to download more bits, what website I go to? OR W...more >>

IUSR account disabled
Posted by wolfing1 NO[at]SPAM yahoo.com at 7/7/2003 6:16:49 AM
Hi. Trying to stop the possibility of some hackers getting into my network I disabled the accounts IUSR_... and IWAM_... Now starting this last weekend I'm seeing lots of warnings in the system log like this: "The server was unable to logon the Windows NT account 'IUSR_...' due to the follow...more >>

Security to send mail with ASP pages: CDO versus SMTP service
Posted by Jean-Marc Vanbel at 7/7/2003 2:29:06 AM
I do an security audit on our WEB applications. What is the most secure method to send an email via an ASP page? The method with calls to CDO object or the method that create a mail file in the \pickup subdirectory of the SMTP service? Is the SMTP service running on the web server a groot ...more >>



Settings
Posted by Steve G at 7/6/2003 8:12:47 PM
Hello All: I beliieve I may have overcooked security settings a bit when I applied the MS Lockdown tool along with URLscan. I have an api that must be accessed by way of Server.CreateObject in order for a shopping cart to send data to the payment processor. More specifically the syntax is: ...more >>

IP ADDRESSES
Posted by Don at 7/6/2003 8:01:42 PM
A question about IP addresses. If an individual or company has IP address of my home computer, how can this be traced to my name and address? In other words, who has access to this information? ISP?...more >>

CHARGED FOR SOMETHING I HAVEN'T ORDERED!!!
Posted by REBECCA at 7/6/2003 1:03:44 PM
HI! TODAY I RECIEVED AN EMAIL FROM "SERVICE@MICROSOFT.COM" TO MY ADDRESS, MOOREFAN2003@YAHOO.COM IT WAS A RECIEPT FOR $19.00 THAT HAD BEEN CHARGED TO MY CREDIT CARD. I HAVEN'T ORDERED ANYTHING FROM MICROSOFT!!??? REBECCA....more >>

IIS permissions with viewing local files
Posted by montmica NO[at]SPAM isu.edu at 7/5/2003 12:17:45 AM
I've developed this javascript which loads the location to a file (i.e. c:\images\picture1.gif). This script then enables me to view the file which happens to be an image file. What is happening is that I am getting the error off the script of Access is denied. Otherwise, something in IIS, I'...more >>

Strange Security alerts about Expired or not yet Valid certificates
Posted by Vasot at 7/4/2003 11:35:11 AM
I have noticed that message popping after yesterday when i was surfing in certain sites SECURITY ALERT about certain Certificate that it has expired or not yet Valid etc and is showing in certain sites when i surf... In the past i do not had a message like that Is it Microsoft tweaking...more >>

\Inetpub\wwwroot\ directory
Posted by Rudianto at 7/4/2003 7:53:54 AM
I have just installed IIS 5.0. on my W2K for web server. I have done some major security setting as suggested in some publications I read but now I realised that I shouldn't have located my \Inetpub\wwwroot\ directory under C:\ (where my OS is installed). Instead, I should have located i...more >>

IIS 5 and Indexing Service
Posted by Eng Kee at 7/4/2003 3:49:56 AM
I would like to use Indexing service in IIS 5, but i facing a problem on 1) How to create a connection between IIS 5 and catalog?. Story : I have created a catalog in indexing service and i'm able to search the text thru 'Query the catalog' file. But now i want it to be accessed via Web. I al...more >>

URLSCAN samples
Posted by Jean-Marc Vanbel at 7/4/2003 3:27:48 AM
Where I can find URLSCAN.INI samples whith comments? Thanks Jean-Marc...more >>

IIS Error
Posted by thaer at 7/4/2003 2:39:50 AM
Hello ! I'm Using Win. Xp Pro. with IIS v. 5.1 The problem is that recently I can't view pages that I created (asp, html etc...) on my localhost. I keep getting the error message: " The page cannot be displayed The page you are looking for is currently unavailable. The Web site might...more >>

enabling iis admin service
Posted by at_sameer NO[at]SPAM yahoo.com at 7/3/2003 9:26:06 PM
Hi, I have a problem with resetting iis server in win2k. I am using iisreset command.It is saying iis admin service is disabled.How to enable the iis admin service. thanks...more >>

HTTPS and frames
Posted by Mark Shin at 7/3/2003 5:11:26 PM
If I have a default web page, say default.asp which has multiple frames such as banner, navigation, and main. Furthermore lets say the main frame displays a signup/login page called loginpage.asp. Now I display the page with https://www.mydomain.com/default.asp Now a user signs up or ...more >>

URLSCAN makes pages with integrated authentication very slow
Posted by Vassilis Galinos at 7/3/2003 4:22:36 PM
Hello all together! After a long time of trying I have found, that Microsoft's URLSCAN (from the Lockdown tool) has some strange behaviors if it is used on virtual directories that have only integrated authentication enabled! So, as you can see below, each request is first called without t...more >>

What happens to encryption when using a connection with an expired certificate?
Posted by Ben at 7/3/2003 11:46:06 AM
What happens to encryption when using a connection to a web server that has an expired certificate? 1) Are you still able to navigate the site even though the certificate expired? 2)Is encryption still enabled? Thanks, Benny...more >>

Can not delete folders made by hacker...
Posted by malic at 7/3/2003 11:08:57 AM
I've had this problem before but I can't remember how I fixed it. Hopefully someone can help me. I have some folders on my HD and I didn't put them there. I believe they have hidden characters in the folder name. When I try to delete them it tells me they are in use. Or it says directory n...more >>

Multiple SSL sites on one server.
Posted by John McDermidt at 7/3/2003 10:24:14 AM
Is it possible to have multiple SSL sites on the same server?? https://www.site1.ca https://www.site2.ca ...more >>

URLScan Tool 2.5 and IIS performance?
Posted by Thomas_Rattelmüller at 7/3/2003 3:17:40 AM
Hello, from the information of the MS UrlScan Website the tool will screens all incoming requests to the server by filtering the requests. Has the URLScan Ttool V.2.5 an impact of the performance of the IIS? After the installation of the tool will the performance of the IIS 4.0/5.0 ...more >>

Replacing IIS Loging Dialog with my own
Posted by Fred Jaw at 7/2/2003 9:17:07 PM
Would somebody have an idea of how to replace the IIS Login Dialog with a custom one. I could create my own and disable Basic and Integrated Windows Authentication; however the idea is to use the IIS Authentication for security reasons. Thanks in advance for any tip....more >>

Has anyone sen messages like
Posted by Rob at 7/2/2003 3:47:38 PM
The server was unable to logon the Windows NT account 'IUSR_WIN2KBOX due to the following error: The referenced account is currently locked out and may not be logged on to. The data is the error code. For additional information specific to this message please visit the Microsoft Online Su...more >>

ActiveX in Certificate Services Web Form
Posted by rlasker3 at 7/2/2003 1:35:25 PM
I have installed a Stand-alone Certificate Services. When I attempted to access the online form to request a client certificate I get an onscreen message saying "Downloading ActiveX control" This message just stays there and the ActiveX is never downloaded preventing me from submitting the Cer...more >>

Grant Access to certain IP Addresses
Posted by JK at 7/2/2003 8:15:22 AM
I have given Grant access permission on a web folder and still these users are unable to access the URL through the browser. But, when another folder is created and these same files are transferred and given permissions using a common userid and password then they can access to this server...more >>

Changing IP Windows 2000 server IIS 5 Page not Found in https
Posted by cedric at 7/2/2003 8:14:39 AM
Hi, Is there any way to get more information about the certificate server after to have change IP in Windows 2000 server? Page not Found in https The website was configured to run with htpps. This old configuration has worked before. cedric...more >>

IIS 6.0 Security, Internet Guest Account
Posted by Berny Zamora at 7/2/2003 4:45:49 AM
Hello: IIS 6.0, Windows 2003 Server Web Edition. Was playing around with security on our test server and changed the Windows user account for anonymouse access under IIS >> Web Sites >> Directory Security >> Authentication and Access Control, Edit to a different account. Now, I wan...more >>

Replys?
Posted by Rick at 7/2/2003 3:52:57 AM
Does anybody ever reply to any of these problems posted?...more >>

Programmatic support to Certificate Services
Posted by Subhash at 7/1/2003 9:47:55 PM
Hi, We have planned to use client certificates issued from Microsoft Certificate Server. I have tried using browser based client of certificate server to request for client certificate. Is there a programmatic support for requesting a client certificate? Any help or pointer to this would be...more >>

How to Change Password when Expiry
Posted by cct at 7/1/2003 5:29:08 PM
Dear all, Server configuration Windows 2000 + SP3 + IIS 5 The IIS server is currently set to use "Integrated Windows Authentication" only. Everytime, other branch offices (connected via VPN), will get prompted with a login dialog when they try to access the pages. I got a problem ...more >>

Virtual Redirection
Posted by ian simmons at 7/1/2003 4:43:05 PM
Does any body know of a way that a virtual directory can be implemented by translatating another site... eg. WebServer on dmz has a virtual directory that points to a web server on the lan side and acts like it is a virtual server but is translating or passing thou the information to the web ser...more >>

IIS 5.0 SSL delay
Posted by Afzal Ahmed at 7/1/2003 3:21:02 PM
I have a web site running with SSL 128 bit encryption. It seems like it is taking too long to load the page and some time give the error page cannot be display. Refresh brings back the page. Can anyone help me solve this problem? Background: The web site is behind the firewall and the a...more >>

HTTP 404 - File not found
Posted by user at 7/1/2003 9:07:22 AM
I am getting HTTP 404 - File not found error on IIS 5.0. I check the NTFS security on file and is not a hidden file as well. I am running IIS5.0 on windows 2000 server. I am trying to download the install.exe file and it comes up with following. The page cannot be found The pa...more >>

SSL + IIS. how i get to do a certificate?
Posted by david at 7/1/2003 7:56:05 AM
im trying to do a certificate but when i go to IIS and i click into folder properties in "folder security/server certificate"... all is disabled why? how can i do to enable these options? thanks david...more >>


DevelopmentNow Blog