all groups > iis security > july 2003 > threads for july 1 - 7, 2003
Filter by week: 1 2 3 4 5
IIS and Front Page
Posted by Tom Kiame at 7/7/2003 11:04:07 PM
Hi,
How i can disable "Edit with MS Front Page" in Internet
Explorer?
i am having IIS4 and .asp files web site?
some of the users use it to modify the web content without
permisions.
thanks
Tom
... more >>
Metabase
Posted by Martin Rösler at 7/7/2003 9:32:40 PM
Hi all,
is there a way to change the banner (connection string) of iis5?
I know how to do this for the smtp service, but i don`t find anything for
the W3svc.
Any Idea!?
Thx,
Martin
... more >>
128 bit Encryption
Posted by Jim Matthews at 7/7/2003 10:36:57 AM
I recently installed an SSL certificate for use with Exchange 2000 Outlook
Web Access
As all my users are on IE 6, I also invoked the "Require 128 bit encryption"
But one of my users was still unable to access it, getting a message to the
effect that the site requires a higher level of encry... more >>
can't rename dir in IIS or through explorer
Posted by rob sullivan at 7/7/2003 10:35:52 AM
I need to rename/delete a directory in a site hosted in
IIS5. It's on a shared server, a subdir of the document
root. I stop the site in IIS and try to rename it, but on
the hd and in IIS, but I can't, getting this error:
Cannot rename [DIRNAME]: Access is denied.
Make sure that the ... more >>
All Accounts Disabled - Hacked
Posted by jordan at 7/7/2003 9:36:41 AM
So, I must've been hacked on Sunday, becuase all my local server accounts
were disabled. Now, I'm trying to get our site back online, but re-enabling
these accounts had no effect.
Anybody out there know the steps to fix the settings the hackers changed?
I'm frantically searching for things t... more >>
secure sites
Posted by Jesus Herrera at 7/7/2003 6:41:33 AM
I'm trying to sign on some secure websites like ARMY
PERSONNEL COMMAND and ARMY kNOWLEDGE ONLINE and I am
unable to do it. My computer has 128 bit. If I need more
than that to be able to sign on this websites, how do I
get more? If I have to download more bits, what website I
go to? OR W... more >>
IUSR account disabled
Posted by wolfing1 NO[at]SPAM yahoo.com at 7/7/2003 6:16:49 AM
Hi. Trying to stop the possibility of some hackers getting into my
network I disabled the accounts IUSR_... and IWAM_... Now starting
this last weekend I'm seeing lots of warnings in the system log like
this:
"The server was unable to logon the Windows NT account 'IUSR_...' due
to the follow... more >>
Security to send mail with ASP pages: CDO versus SMTP service
Posted by Jean-Marc Vanbel at 7/7/2003 2:29:06 AM
I do an security audit on our WEB applications.
What is the most secure method to send an email via an ASP
page? The method with calls to CDO object or the method
that create a mail file in the \pickup subdirectory of
the SMTP service?
Is the SMTP service running on the web server a groot
... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Settings
Posted by Steve G at 7/6/2003 8:12:47 PM
Hello All:
I beliieve I may have overcooked security settings a bit when I applied the
MS Lockdown tool along with URLscan.
I have an api that must be accessed by way of Server.CreateObject in order
for a shopping cart to send data to the payment processor. More specifically
the syntax is:
... more >>
IP ADDRESSES
Posted by Don at 7/6/2003 8:01:42 PM
A question about IP addresses. If an individual or company
has IP address of my home computer, how can this be traced
to my name and address? In other words, who has access to
this information? ISP?... more >>
CHARGED FOR SOMETHING I HAVEN'T ORDERED!!!
Posted by REBECCA at 7/6/2003 1:03:44 PM
HI! TODAY I RECIEVED AN EMAIL
FROM "SERVICE@MICROSOFT.COM" TO MY ADDRESS,
MOOREFAN2003@YAHOO.COM IT WAS A RECIEPT FOR $19.00 THAT
HAD BEEN CHARGED TO MY CREDIT CARD. I HAVEN'T ORDERED
ANYTHING FROM MICROSOFT!!???
REBECCA.... more >>
IIS permissions with viewing local files
Posted by montmica NO[at]SPAM isu.edu at 7/5/2003 12:17:45 AM
I've developed this javascript which loads the location to a file
(i.e. c:\images\picture1.gif). This script then enables me to view
the file which happens to be an image file. What is happening is that
I am getting the error off the script of Access is denied. Otherwise,
something in IIS, I'... more >>
Strange Security alerts about Expired or not yet Valid certificates
Posted by Vasot at 7/4/2003 11:35:11 AM
I have noticed that message popping after yesterday
when i was surfing in certain sites
SECURITY ALERT about certain Certificate that it has
expired or not yet Valid etc and is showing in certain
sites when i surf...
In the past i do not had a message like that
Is it Microsoft tweaking... more >>
\Inetpub\wwwroot\ directory
Posted by Rudianto at 7/4/2003 7:53:54 AM
I have just installed IIS 5.0. on my W2K for web server. I
have done some major security setting as suggested in some
publications I read but now I realised that I shouldn't
have located my \Inetpub\wwwroot\ directory under C:\
(where my OS is installed). Instead, I should have located
i... more >>
IIS 5 and Indexing Service
Posted by Eng Kee at 7/4/2003 3:49:56 AM
I would like to use Indexing service in IIS 5, but i
facing a problem on
1) How to create a connection between IIS 5 and catalog?.
Story : I have created a catalog in indexing service and
i'm able to search the text thru 'Query the catalog' file.
But now i want it to be accessed via Web. I al... more >>
URLSCAN samples
Posted by Jean-Marc Vanbel at 7/4/2003 3:27:48 AM
Where I can find URLSCAN.INI samples whith comments?
Thanks
Jean-Marc... more >>
IIS Error
Posted by thaer at 7/4/2003 2:39:50 AM
Hello !
I'm Using Win. Xp Pro. with IIS v. 5.1
The problem is that recently I can't view pages that I
created (asp, html
etc...) on my localhost. I keep getting the error message:
" The page cannot be displayed
The page you are looking for is currently unavailable.
The Web site might... more >>
enabling iis admin service
Posted by at_sameer NO[at]SPAM yahoo.com at 7/3/2003 9:26:06 PM
Hi,
I have a problem with resetting iis server in win2k. I am using iisreset
command.It is saying iis admin service is disabled.How to enable the iis admin
service.
thanks... more >>
HTTPS and frames
Posted by Mark Shin at 7/3/2003 5:11:26 PM
If I have a default web page, say default.asp which has
multiple frames such as banner, navigation, and main.
Furthermore lets say the main frame displays a
signup/login page called loginpage.asp.
Now I display the page with
https://www.mydomain.com/default.asp
Now a user signs up or ... more >>
URLSCAN makes pages with integrated authentication very slow
Posted by Vassilis Galinos at 7/3/2003 4:22:36 PM
Hello all together!
After a long time of trying I have found, that Microsoft's URLSCAN
(from the Lockdown tool) has some strange behaviors if it is used on
virtual directories that have only integrated authentication enabled!
So, as you can see below, each request is first called without t... more >>
What happens to encryption when using a connection with an expired certificate?
Posted by Ben at 7/3/2003 11:46:06 AM
What happens to encryption when using a connection to a
web server that has an expired certificate?
1) Are you still able to navigate the site even though the
certificate expired?
2)Is encryption still enabled?
Thanks,
Benny... more >>
Can not delete folders made by hacker...
Posted by malic at 7/3/2003 11:08:57 AM
I've had this problem before but I can't remember how I fixed it. Hopefully
someone can help me.
I have some folders on my HD and I didn't put them there. I believe they
have hidden characters in the folder name. When I try to delete them it
tells me they are in use. Or it says directory n... more >>
Multiple SSL sites on one server.
Posted by John McDermidt at 7/3/2003 10:24:14 AM
Is it possible to have multiple SSL sites on the same server??
https://www.site1.ca
https://www.site2.ca
... more >>
URLScan Tool 2.5 and IIS performance?
Posted by Thomas_Rattelmüller at 7/3/2003 3:17:40 AM
Hello,
from the information of the MS UrlScan Website the tool
will screens all incoming requests to the server by
filtering the requests.
Has the URLScan Ttool V.2.5 an impact of the performance
of the IIS?
After the installation of the tool will the performance of
the IIS 4.0/5.0 ... more >>
Replacing IIS Loging Dialog with my own
Posted by Fred Jaw at 7/2/2003 9:17:07 PM
Would somebody have an idea of how to replace the IIS
Login Dialog with a custom one. I could create my own and
disable Basic and Integrated Windows Authentication;
however the idea is to use the IIS Authentication for
security reasons.
Thanks in advance for any tip.... more >>
Has anyone sen messages like
Posted by Rob at 7/2/2003 3:47:38 PM
The server was unable to logon the Windows NT
account 'IUSR_WIN2KBOX due to the following error:
The referenced account is currently locked out and may not
be logged on to. The data is the error code.
For additional information specific to this message please
visit the Microsoft Online Su... more >>
ActiveX in Certificate Services Web Form
Posted by rlasker3 at 7/2/2003 1:35:25 PM
I have installed a Stand-alone Certificate Services. When I attempted to
access the online form to request a client certificate I get an onscreen
message saying "Downloading ActiveX control"
This message just stays there and the ActiveX is never downloaded preventing
me from submitting the Cer... more >>
Grant Access to certain IP Addresses
Posted by JK at 7/2/2003 8:15:22 AM
I have given Grant access permission on a web folder and
still these users are unable to access the URL through the
browser. But, when another folder is created and these
same files are transferred and given permissions using a
common userid and password then they can access to this
server... more >>
Changing IP Windows 2000 server IIS 5 Page not Found in https
Posted by cedric at 7/2/2003 8:14:39 AM
Hi,
Is there any way to get more information about the
certificate server after to have change IP in Windows
2000 server?
Page not Found in https
The website was configured to run with htpps.
This old configuration has worked before.
cedric... more >>
IIS 6.0 Security, Internet Guest Account
Posted by Berny Zamora at 7/2/2003 4:45:49 AM
Hello:
IIS 6.0, Windows 2003 Server Web Edition.
Was playing around with security on our test server and
changed the Windows user account for anonymouse access
under IIS >> Web Sites >> Directory Security >>
Authentication and Access Control, Edit to a different
account.
Now, I wan... more >>
Replys?
Posted by Rick at 7/2/2003 3:52:57 AM
Does anybody ever reply to any of these problems posted?... more >>
Programmatic support to Certificate Services
Posted by Subhash at 7/1/2003 9:47:55 PM
Hi,
We have planned to use client certificates issued from Microsoft
Certificate Server. I have tried using browser based client of
certificate server to request for client certificate. Is there a
programmatic support for requesting a client certificate?
Any help or pointer to this would be... more >>
How to Change Password when Expiry
Posted by cct at 7/1/2003 5:29:08 PM
Dear all,
Server configuration
Windows 2000 + SP3 + IIS 5
The IIS server is currently set to use "Integrated Windows Authentication"
only.
Everytime, other branch offices (connected via VPN), will get
prompted with a login dialog when they try to access the pages.
I got a problem ... more >>
Virtual Redirection
Posted by ian simmons at 7/1/2003 4:43:05 PM
Does any body know of a way that a virtual directory can be implemented by
translatating another site...
eg. WebServer on dmz has a virtual directory that points to a web server on
the lan side and acts like it is a virtual server but is translating or
passing thou the information to the web ser... more >>
IIS 5.0 SSL delay
Posted by Afzal Ahmed at 7/1/2003 3:21:02 PM
I have a web site running with SSL 128 bit encryption. It
seems like it is taking too long to load the page and some
time give the error page cannot be display. Refresh brings
back the page.
Can anyone help me solve this problem?
Background:
The web site is behind the firewall and the a... more >>
HTTP 404 - File not found
Posted by user at 7/1/2003 9:07:22 AM
I am getting HTTP 404 - File not found error on IIS 5.0. I check the NTFS
security on file and is not a hidden file as well.
I am running IIS5.0 on windows 2000 server.
I am trying to download the install.exe file and it comes up with following.
The page cannot be found
The pa... more >>
SSL + IIS. how i get to do a certificate?
Posted by david at 7/1/2003 7:56:05 AM
im trying to do a certificate but when i go to
IIS and i click into folder properties in
"folder security/server certificate"...
all is disabled
why?
how can i do to enable these options?
thanks
david... more >>
|