Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > iis security > september 2003 > threads for september 22 - 28, 2003

Filter by week: 1 2 3 4 5

Network POP UP ads.. New type of SPAM
Posted by mjmonschein NO[at]SPAM msn.com at 9/28/2003 5:11:50 PM
I've been hit by this Website over and over and over and over.... http://www.destroyads.com/ They tell me for $24.95 I can download a software to prevent such popups. What kind of scam is this? They are the only such company that I have dealt with that is abusing the Networking features in...more >>


Messenger Service Pop Up Ads
Posted by Ella Rae Adams at 9/28/2003 4:57:43 PM
Does anyone know how to stop messenger service pop up ads? I did not recieve these ads when I had Windwos 98 operating system. Thanks for anyone's help....more >>

spyware
Posted by kshrum at 9/28/2003 1:09:10 PM
Clearfind.com has set itself as my homepage and I cannot remove it. In internet options my set homepage option is greyed out. How do I get rid of it? Thanks...more >>

Try on this patch
Posted by Howard Andrews at 9/27/2003 6:44:36 PM
Microsoft Customer this is the latest version of security update, the "September 2003, Cumulative Patch" update which resolves all known security vulnerabilities affecting MS Internet Explorer, MS Outlook and MS Outlook Express as well as three new vulnerabilities. Install now to continue ke...more >>

I tried to post a message a few minutes ago and nothing shows
Posted by Hazel at 9/27/2003 5:49:27 PM
Even though Microsoft said my message would appear in a few seconds, nothing showed in several minutes. Wonder what happened? I've had three messages on my Yahoo account from Microsoft. The subject telling me to use the patch immediately was preceded by icon that has paperclip on a recta...more >>

How do I know if this email is legitimate Microsoft email?
Posted by cyberpltops975 at 9/27/2003 5:42:08 PM
In my email inbox on my Yahoo account, I have had three messages telling me to use the Microsoft patch right away. The subject was preceded by the icon paperclip like one on a square white rectangular box. Since I understand Microsoft has been attacked by the awful virus, I am checking to ...more >>

DCOM Error
Posted by Bryan at 9/27/2003 11:32:40 AM
DCOM got error "Overlapped I/O operation is in progress. " and was unable to logon ..\IWAM_SINDMSPGEN01 in order to run the server: {F21BD7BE-1CF4-41F2-9C75-E3841A578F45} ---dcom Has anyone seen this error before and know possible causes?...more >>

certificate
Posted by John Hale at 9/27/2003 9:16:45 AM
I installed a certificate for a public servers ssl pages, from a "unknown" server somewhere else. I trust the cert because I generated, but the message continues to pop-up and it says: issuer not trusted. These computers don't know each other, etc. Is there a way to do this without pa...more >>



Outlook Express 6
Posted by Brian Haller at 9/27/2003 7:12:16 AM
I recently started using Outlook Express 6 for e-mail and have been having problems with OE removing attachments (eml and pdf extensions. How can this be managed?...more >>

unable to receive e-mails for aol users
Posted by terry at 9/26/2003 5:07:40 PM
Help!. I was going though junk mail and I hit the button saying not to accept anything for addresses ending with aol.com I did not mean to hit that one I wanted to block mail coming from certain junk mailings. How can I get mail from my friends that use e-mail through aol? ...more >>

pop up hell
Posted by michelle at 9/26/2003 2:11:39 PM
PLEASE HELP ME STOP THESE POP UPS. I AM A NETWORK ADMIN AND I CAN NOT GET RID OF THESE POP UPS. I AM GOING CRAZY. I WISH I COULD SUE SOMEONE FOR THE DISRUPTION TO OUR COMPANY. UNABLE TO WORK...more >>

Cannot connect to Site once SSL installed
Posted by BG at 9/26/2003 12:00:28 PM
I recently installed SSL using the MS CA Services. When I connect from a client, it tells me I need to use https. So, I do, and I get parge not found. The IIS log shows error 403. I have the diagnostic tool and when I run the simulated handshake, i get System time: Fri, 26 Sep 2003 18:35:...more >>

Remote access to a web folder
Posted by John Kievlan at 9/26/2003 11:51:02 AM
I need to be able to use Visual Studio .NET on my workstation to work with projects in a web folder on our Windows 2003 server over the internet (TCP/IP), since the web server is *not* networked to the office. Can I do that? If so, how? I really don't know much about Windows 2003....more >>

SSL on IIS 5.0
Posted by news.microsoft.com at 9/26/2003 11:44:08 AM
Hi, I have two sites with different IPs bind to them. Can I install different certificates on these two sites. If anyone know pls tell me the detailed procedure. I have tried but its not working. Only one site is working but the second one gets the page of the first site i configured. Thank...more >>

URLscan 2.5 log entry odditity
Posted by Roger Abell at 9/26/2003 11:24:44 AM
As seen in URLscan log of an IIS 5 at all current service [09-22-2003 - 23:42:46] Client at 213.31.11.55: Error 122 occurred getting verb. Request will be rejected. Is this the same 122 as net helpmsg describes as an exception due to an "undersized data area passed to system call" (i.e. if so...more >>

renewing SSL on our IIS 4.0 on NT for webmail.
Posted by rob lin at 9/26/2003 10:20:15 AM
Need some help on this one. Currently we're running our webmail on a NT 4.0 box with IIS 4.0 our certificate is about to expire with verisign, and we want to set this up ourself. We also have certificate server on MMC 1.2 service pack 3 running on our sql box on a different domain. Thanks, ...more >>

Conect to IIS remotely
Posted by MS News at 9/26/2003 10:08:10 AM
I have a utility the adds websites in IIS from a remote computer. Can someone tell me what policies, permission, or whatever I need to change to be able to connect to the IIS from a remote server. ...more >>

spidersearch.com Bar
Posted by jeff king at 9/26/2003 7:11:34 AM
how do I eliminate this??...more >>

Linux To IIS
Posted by rajaher NO[at]SPAM hotmail.com at 9/26/2003 2:00:10 AM
HI, We are trying to transfer few websites from Linux hosting to IIS ( On windows 2003). Some of the users on these sites get authenticated against linux '.BDB' file ( which holds the info about username and password) Once this we sites are transfered to IIS ,,is there a way to transfer th...more >>

Question About Cyber Sentinel
Posted by Benny Perales at 9/25/2003 11:27:28 PM
Many times when I'm accessing the internet, my access is interrupted by this error: "CYBER SENTINEL - VIOLATION DETECTED ....enter password to override Cyber Sentinel" I'm not sure which program generates this security message, but I'd like to know where I can find (or create) the pa...more >>

IIS 5 SSL Failure after SP4??
Posted by Blah at 9/25/2003 8:56:54 PM
Hi, After installation of SP4 on IIS5 (win2k) SSL no longer functions consistantly. It will load https pages occasionally (from outside clients) but normally just gets a DNS error. SSL pages will never load browsing from the server. Non-ssl the site will work ok both on the server's browser and ...more >>

Anti-virus software on Win2K Web server
Posted by Steve at 9/25/2003 6:38:07 PM
Hello, I just noticed that our dedicated server doesn't have any anti-virus software running on it. Before I run out and get Norton's Anti-Virus Corporate Edition, is it a good idea to put anti-virus software on a web server (we do some uploading of ..doc and .xls files for our user base to...more >>

SSL for Exchange Cluster
Posted by Brad at 9/25/2003 1:07:38 PM
I am wanting to secure a new Exchange Environment. Active/Passive Exchange Cluster, so can I bind the SSL cert to server 1 and server 2 under the same DNS or do I need to purchase a cert for each server. with the same DNS? Thanks! ...more >>

Receiving Unspecified Error...
Posted by David Lozzi at 9/25/2003 1:01:14 PM
Unspecified error C:\INETPUB\WWWROOT\WELCOME\../common/adovbs.inc, line 4 And line 4 is this Connect.Open "database" Its happening across the board too, on each database on this server. Same errors, but connecting to different databases. Any ideas? -- David Lozzi Associated Busine...more >>

Certificate missing when moving from one server to another
Posted by Viba Fima at 9/25/2003 12:42:04 PM
I am retiring an old IIS server and need to move its Web certificate to another server. I follow Microsoft directions to use the Certificate MMC to export, and on the new server, use the Certificate MMC to import. I check the certificate info and everythink looks fine, with intended use as "Ser...more >>

** READ THIS BEFORE POSTING - answers to frequently asked questions 2003.09.25
Posted by Karl Levinson [x y] mvp at 9/25/2003 11:27:20 AM
Before you post a question to a Microsoft.public.*.security newsgroup, note that your question may already be answered below: Answers to Top Frequently Asked Questions: http://securityadmin.info My question is not mentioned below. How do I get an answer immediately, with no waiting? http:...more >>

IIS with DOTNET 1.1
Posted by Dimitrie at 9/25/2003 11:26:52 AM
I would like to install the DOTNET 1.1 FRMWRK on a production machine (IIS5 Win2k). It runs ASP and it's locked down with the IIS 2.1 LockDown Tool and a bunch of few other tweaks. The intent is to start porting old ASP scripts to ASPX. No web services intended. By simply installing the framew...more >>

email received not sure if real
Posted by SE at 9/25/2003 10:45:31 AM
Microsoft Corporation Public Assistance"=20 <qospmbsbnraha@updates.com> I received this emaill with=20 an attachment to download, but was not sure if it is=20 really from Microsoft as I update regularly and there are=20 no updates for windows see below for content of message From: "Micros...more >>

Certificate / SSL
Posted by John Hale at 9/25/2003 7:13:40 AM
I have a website and require SSL for some of the content. I installed a certificate, and each time a user connects, the certificate re-maps or has to be accepted each time. IS there a way which we can require acceptance only once, or can we have ssl without a certificate? Any help is a...more >>

Certificate services issues
Posted by David M at 9/24/2003 11:08:45 PM
I am attempting to bring up certificate service to create a couple of certificates to use for internal testing of web pages before moving them to public locations where Verisign certs will be used. I initially installed certificate services with a standalone Certificate Authority on an AD server...more >>

Backup "pending request"?
Posted by Mark at 9/24/2003 10:10:33 PM
Apologies for the long posting. :-) I'm about to apply for a certificate for an IIS server. Whilst the CA is cranking out the certificate, I'm having a play with a test certificate using the _same_ web site by creating my own CA on MS Cert Authority. I notice that in IIS I can only have one pe...more >>

Authentication without anonymous
Posted by Pascal Fluck at 9/24/2003 10:25:08 AM
Hello, I'm doing an application ASP and she have her own login. Now I'm working to do "autologin" for user who are in the same domain (iis authentication). It work fine... But now, when a user try to launch application from external domain, I would the application login appear without stand...more >>

ASP Pages not displaying?
Posted by A at 9/24/2003 9:54:11 AM
Hi All, I'm having a problem whereby when I try to view asp pages I get an error 404 page cannot be displayed. I've tried restarting IIS Admin service, default website but to no avail.I've been using IIS for a while now but I've never come across this before. I might add that this is the first t...more >>

autologin for php
Posted by Quy Ngo at 9/24/2003 9:42:07 AM
is there any way that php can get the user login and authenticate using iis? ...more >>

reply difficulties
Posted by Jenny at 9/24/2003 5:19:54 AM
Does anyone know why I would not be able to reply to to others e-mails or have them reply to me. There are no error messages. I have bellsouth as my ISP. Two e-mail accounts exist, bellsouth and bww. I receive both on outlook express, but only receive replies on bellsouth. I thank anyon...more >>

UseHostName - Is this a valid IIS 6 setting?
Posted by Ray at 9/23/2003 7:11:40 PM
I've configured the metabase (IIS 5) so the server would return it's DNS host name vs. it's IP address when performing redirects. Is the "UseHostName" setting a valid metabase entry for IIS 6.0? The MSDN site only lists IIS 5.0 & 5.1. TIA Ray http://msdn.microsoft.com/library/default....more >>

removing Content Advisor password
Posted by Juanita at 9/23/2003 6:57:50 PM
I need to remove my content advisor password, everytime I try to display a web page I get no page to display go to my content advisor. (Do not have a glue what it is) Thanks for all you help...more >>

oe attachments
Posted by roger at 9/23/2003 3:04:26 PM
how do I enable attachments not be removed by oe? thanks...more >>

Valid Critical Pack?
Posted by COB at 9/23/2003 2:41:26 PM
Is the recent e-mail message from Microsoft with the attached "installer211.exe" valid? Should it be downloaded?...more >>

Authenticating into two directories on same site
Posted by EN at 9/23/2003 2:01:46 PM
I have a webserver, windows 2000 IIS 6, and in the layout, I need to have users authenticate into two different web folders on the same site. The users can authenticate fine into one, but once they go and try to authenticate into the other part of the site that is secure, they get a "Page can...more >>

multiple password prompts in web site
Posted by Richard at 9/23/2003 1:14:51 PM
I am relatively new to this. I am setting up a personal website at home. I have a link within my default page, to a "members" page. This member page, is within a folder under the web site folder, and I have chanegd the NTFS rights so only the administrator and the system have full rights...more >>

New virus threat
Posted by Geoff Molloy at 9/23/2003 12:20:52 PM
Just received an email, allegedly from Microsoft, with a heading 'last critical update' Should anyone recieve one of these, Microsoft DO NOT send out updates by email. These messages contain a virus You have been warned. Best wishes and happy surfing Geoff *** Sent via Developers...more >>

Block mdb downloads
Posted by Dan Getz, Jr. at 9/23/2003 11:15:33 AM
We have an interesting scenario in which we need to block access to downloading Access databases (mdb). Before you suggest that we just put them in a folder not accessable via the web, that's not possible. Is there any way (short of setting permissions on every single database) that we can blo...more >>

dropped packets
Posted by brad grim at 9/23/2003 11:07:01 AM
What is an echo request?...more >>

IIS W3SVC1 Log File with something else from buffer
Posted by Ben at 9/23/2003 9:33:09 AM
Hi all, Sometime I found on my IIS Log File some of other text added in. I think the text from the buffer. The text may be a part of email I was reading, or a part of data I copy/past on some word documents. My system is win2000 Pro. with all up-to-date MS Critical Update. My Norton An...more >>

IIS LockDown Delete my site configuration
Posted by Andres Betancur at 9/23/2003 8:59:32 AM
Hi all, I run the iis lock down on my web server and aparently everything goes fine. Then when i browse to my default web site it doesn't appears, the i move to the Internet Service Manager and i didn't find my site, the tool deletes it. Someone with a similar experience ? REgards....more >>

cannot log on to secure sites
Posted by vicki at 9/23/2003 7:33:44 AM
HELP! I am unable to log into secure websites, pay bills on line, college secure sites, etc. The computer specialist told me I downloaded a corrupted file from Microsoft between September 11 and Sept 18 that was an update for a root certificate. He told me I had to take my computer back...more >>

How to get out of this error message "Database or object is read-only"
Posted by Maple at 9/22/2003 5:03:03 PM
After I moved my ASP pages and an Access database from PWS in NT 4.0 to IIS 5.0 in XP Pro, I can't edit data in the database through the ASP web application. The error type is... Microsoft JET Database Engine (0x80040E09) Cannot update. Database or object is read-only. However, the datab...more >>

Is "Certificate Trust Lists" (CTL) an IIS-only concept?
Posted by Ohaya at 9/22/2003 4:31:09 PM
Hi, This should be a simple question (for once :)!). I was wondering, is the concept and/or term "Certificate Trust Lists" or "CTL" something that is IIS-only? Or is it a general PKI concept/term? I'm just curious because I've scanned through a number of generic PKI-specific books, and ...more >>

CDO access denied
Posted by mar10 at 9/22/2003 2:49:12 PM
Where do i need to go to correct this error in my ASP APP. The actual error is: Error MS VBScript Runtime (0x800A0046) Permission denied. appfolder/appname/line number..(which is the cdo.send)...more >>

First time post - Configuration Guide for IIS / Win2K
Posted by hjdebruyn NO[at]SPAM home.nl at 9/22/2003 2:49:07 PM
Hi there everyone, The question I have is rather simple, is there somewhere on the net an idiot (fool) proof configuration guide to host websites on a Win2K IIS webserver? There are lots and lots of sites that can guide me to security issues in IIS or on Win2K according to my wish to host we...more >>

allow .config downloads
Posted by Bill at 9/22/2003 12:09:33 PM
I have a .net client with a .config file that I would like a user to download. IIS seems to restrict downloads of files with a .config extension. I would like to allow the .config file to be downloaded from this folder. Can anyone tell me how? Thanks Bill...more >>

personal privacy policy
Posted by mark at 9/22/2003 9:04:45 AM
Hi, I'm trying to insert a compact privacy policy string into the custom HTTP header of a site running on IIS6 on Server2003. The problem is that the input text box is truncating the compact policy string. It looks like a max length property is being applied to the input box. This wa...more >>

IWAM account
Posted by Srini at 9/22/2003 7:44:18 AM
Could someone explain me how IWAM account is used. As per my understanding, if a COM component is called by ASP page, The process will be owned by the user running the ASP page ( IUSR or local user depending on the authentication ). But how IWAM account is used to run COM components? Thank...more >>


DevelopmentNow Blog