all groups > iis security > january 2004 > threads for january 15 - 21, 2004
Filter by week: 1 2 3 4 5
File download problem in IIS6.0
Posted by Manuel Delgado at 1/21/2004 1:10:50 PM
Hi there,
I'm having trouble with my first IIS6.0 on Windows Server 2003.
The web site works fine: all ASP pages are processed and displayed normally.
The problem is we are not able to download any files from the site (pdf,
zip, doc, ...) When you click on a link pointing to one of these fil... more >>
IIS and Microsoft CA (windows 2003)
Posted by Charles at 1/21/2004 12:21:21 PM
When I install the certificate services on a windows 2003
server, I am able to set my website up to use https.
My question is when I view the website from the internet,
I get the message "Revocation information for security
certificate ...not available", was this type of setup not
make fo... more >>
Outlook Address Book Access
Posted by Kathy at 1/21/2004 11:17:16 AM
My children go to a school that uses Outlook.
Recently kids have been sending harrassing emails
to the entire school by highlighting everyone's
address in the system address book. Is there a way
to take away their ability to access this address
book?
... more >>
SUS kills asp pages after install
Posted by Michael at 1/21/2004 10:21:06 AM
I ran the sus install and it killed my website no asp pages will work. i have runt heundo and unsinstalled urlscan but the pages are still down. That is the error I get
Microsoft VBScript runtime error '800a01a8'
Object required: 'Session'
/webh/login.asp, line 5 ... more >>
IIS 5 bandwidth throttling
Posted by Adds at 1/21/2004 9:22:42 AM
Morning.
One of the servers we host is using too much bandwidth and we'd like to be
able to limit that amount of bandwidth available for a particular virtual
web site (or, if not possible, the machine itself - It's almost dedicated).
The problem is that the site in question uses about 95% dy... more >>
windows NT 4.0 Hotfix installation did not complete
Posted by HUBCO at 1/21/2004 8:15:34 AM
HI there;
I have a Windows NT 4.0 Server running IIS, and every
time I try to install a hot-fix I get the following
windows boxes after the installation:
Box #1: Installation was successful
Box #2: Windows NT 4.0 Hot fix installation did not
complete
I need to apply the hot-fixes to pr... more >>
Allow non admin user to manage IIS 6.0
Posted by JR at 1/21/2004 7:55:38 AM
Hello,
I would like to allow a non administrator user the rights
to manage all functions of IIS within a server. Is this
possible? I can't seem to find anything under the local
security policy.
Thanks!
JR... more >>
Outlook express error "MSIMN has caused error in directdb.dll"
Posted by Seamus O' Leary at 1/21/2004 7:51:06 AM
Outllook express can not receive emails. I get the error message msimn has cuased an error in directdb.dll
Any help pleas
Seamus@iht.ie... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Load balance behind Cisco content switch yields 401 errors
Posted by kgould NO[at]SPAM yahoo.com at 1/21/2004 6:56:09 AM
Situation:
2 servers, ksovetapp001 ksovetapp002
We're load balancing between them with a Cisco content switch with DNS
name CCXAPP. When we access pages anonymously, it works fine. If we
access pages requiring authentication (integrated is set) we get:
2004-01-21 14:50:30 10.x.x.16 GET
/Ge... more >>
HACKER visits my web site
Posted by Chrsi Grady at 1/20/2004 6:43:03 PM
HACKER!
Hardware: Pentium 4 2.53 Ghz with 512 RAM
Operating System: Windows XP Pro w/Service Pack 1
IIS V5.1 is installed and operating
Server Extensions are now turned OFF
My personal webpage was recently hacked/defaced. I would
like to determine how 1) this happened; and 2) how this
t... more >>
Another type of access needed to 'save as' and .htm in IIS 6?
Posted by RiverCoyote at 1/20/2004 4:56:06 PM
Hey there,
Migrated an IIS 5 on Windows 2000 site to IIS 6 on 2003 Web Edition server.
Everything is working great, EXCEPT:
Have a UNC share mapped to a share inside the intranet which is part of the
main site, not a separate site.
They simply (used to) open the share, and using their Modify... more >>
Multiple sites using SSL on same IIS server
Posted by Fred at 1/20/2004 2:56:07 PM
We have an extranet server hosting two sites, using SSL.
One is port 443 (default site), the other is port 444. We
have two security certificates installed, one for each
site. However, when we browse to the second site (port
444), and view the certificate the one that comes up in
the bro... more >>
Folder with no NAME
Posted by Dumb Founded at 1/20/2004 12:21:56 PM
A folder was found on our WEB server running Adv 2000, in
the wwwroot folder. It had no name and had several
hundred subfolders which each had several hunder more
subfolders.
When we tryed to delet or move the folder an access
denied dialog box appeared.
Has any one reported this before.... more >>
Redirecting to custom .aspx error page?
Posted by swheatley22 NO[at]SPAM yahoo.com at 1/20/2004 12:19:15 PM
I found the following posting,
http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&oe=utf-8&selm=Rnw8J81PCHA.1712%40cpmsftngxa07
which loosely explains how to do a joint NTLM/Passport authenticated
site, with a database for roles. I have been able to modify this
slightly to work for my own for... more >>
FTP Accounts
Posted by Jim Wilson at 1/20/2004 11:28:38 AM
I'm new to setting up an FTP server. Can someone tell me
what I need to do to give write access to someone out
side of my domain? ... more >>
IIS 5.0 and access via IP
Posted by Eddie at 1/20/2004 9:46:51 AM
I have a question about granting access to a web site
across domains.
I have a web site that allows IUSER_Servername to access
it within my domain, but I was asked to allow a certain
user from a different domain with static IP access to the
web site, but there is no trust relationship betwe... more >>
Locally created certificate for web site - works?
Posted by Bruce Piper at 1/20/2004 9:13:25 AM
Hello,
Can I create a certificate for my web-site to turn on SSL
or do I have to purchase a certificate from Verisign to
allow SSL on my public web site?
Bruce... more >>
IIS Directory Security Resets after restarting Services or Reboot
Posted by Jason Smith at 1/20/2004 5:06:56 AM
My IIS Directory Security resets for my Exchange Web
Outlook. The security resets to integrated Windows
Authentication. In order for my users to log in,
Anonymous log in and Basic Authentication need to be
checked, but after the server restarts (or services
restarted) the Basica Authenti... more >>
search pop up
Posted by jenks at 1/20/2004 12:03:40 AM
i keep getting an annoying search popup when surfing the
internet. how do i remove it so it doesn't continue. the
web address is 1)http://globefinder.net/344012
2)http://outtruecounter.com... more >>
IIS 6.0 SITE USING SSL
Posted by DAN at 1/19/2004 11:11:49 PM
Hey everyone. I know this is a fairly simple question,
but I'm having some trouble. I want to setup a site to
use SSL, but when I go to the site using https nothing
shows up. I'm not concerned with getting a certificate
just yet, I just want to access the site without one for
now. I know t... more >>
Funky Log entry
Posted by Joseph at 1/19/2004 9:20:08 PM
Found this followed by a 404 what is it?
default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9 090%u6... more >>
microsoft
Posted by anonymous sender at 1/19/2004 5:22:30 PM
i have ended up here in vain, i am trying to configure a
Nokia communicator with my home pc(xp operating system,
but when i try to synchronisethe two together, i get an
error box up saying that it could not open the microsoft
exchange server, and i do not actually know how to put
the setti... more >>
generate SSL certifikate
Posted by tex at 1/19/2004 3:16:22 PM
Hi,
can I generate certifikate by myself ?
I have certreq.txt (from my IIS) and I need generate certreq.cer
Tex.
... more >>
NT Challenge prevents user from getting in
Posted by Tom at 1/19/2004 1:46:56 PM
I am using the NT Challenge on IIS without anonymous
access to ensure that only those who have access to the
network can access the web site.
Problem is a user who has access to network, but is
repeatedly asked to re-enter his user information and it
never allows him in. I can't think why... more >>
Certificate usage
Posted by Patrick at 1/19/2004 1:45:43 PM
I have installed an SSL certificate on a web server. Now, I want to replace
that server with a new server. I would like to use the same certificate on
that new server, which would have the same DNS name, machine name, etc.
Both machines use IIS5.1 under Windows 2000 Server. I note from IIS->... more >>
SSL and a CA
Posted by rob at 1/19/2004 1:12:06 PM
I would like to use our own internal CA to issue a
certificate for our intranet web sites. These servers are
accessed from inside, but also from outside of our network
as well. Do remote clients need any type of access to our
internal CA server? If so what? Can you please explain?
Tha... more >>
Newbie 5.0 security question
Posted by enaitee at 1/19/2004 12:35:25 PM
Hi..After a lot of web searching and reading I finally got IIS working
on my W2000 system. I had never heard of it prior to setting out to
learn how to make web sites interactive with cgi scripts. My need for
it is, for now at least, to test web site coding prior to uploading to
my online serv... more >>
Messenger Services popups
Posted by omar at 1/19/2004 10:54:11 AM
Recently I'm recieving this nasty popups on messanger
services and there is no way to get rid of them, Norton
can not fix them and they latch in some sort of program
called hotbar or tool bar. I have tried deleting them but
they come back. I even went to the registry and erase
every .dll a... more >>
IUSR_computername security question
Posted by Jon at 1/19/2004 8:36:03 AM
I've always understood that you need to have the
IUSR_computername account setup with read access on the
NTFS directory where you keep your website files.
Is this correct?
Reason I'm asking, is that I removed the account, and my
IIS6 website still works just fine. I'm trying to tighten
... more >>
Preventing multiple login prompts when using 2 different domains
Posted by Jdaunoravicius NO[at]SPAM questarcapital.com at 1/19/2004 12:43:36 AM
We have 2 domains for internal purposes: one for users (have to login
and domain has SSL) and another for sponsors (have to login and domain
does NOT have SSL).
Now when a user logs in and there are pages that have info from the
sponsors domain, users are asked to login again with a warning me... more >>
IDQ, IDA, HTX files cannot be placed on a network share?
Posted by Khoa Le at 1/18/2004 11:08:11 PM
Hi all,
I am new to index/iis server 5.0. Currently a virtual web site is hosting
on iis 5.0 server but all of its files are on a different server, on a file
server.
The index service is also installed on the IIS server. A catalog is
configured on the IIS server, but all IDQ, IDA, and HTX... more >>
Single Sing-on?
Posted by ML at 1/18/2004 10:05:29 PM
I've got two IIS servers, one 5 the other 6, hosting two sites. Both are
part of the same AD name, and I now need to provide single sign on
capabilities to the two sites.
They are both set up to use Integrated Authentication. Users inside the
network can get on without being prompted, as expec... more >>
Can't Access Web Site after changing ISUR_ Security Settings
Posted by Rick at 1/18/2004 1:03:51 PM
I changed the default security settings for IUSR and all
of the ISUR accounts changed to the new settings. Is
there an easy way to get the IUSR account set back to
default so the website can be acessed by the public?... more >>
Cant get rid of the auto finisher
Posted by Cool at 1/18/2004 11:57:34 AM
when i type a website in or use a search engine it
automatically finishes it for me how do i get it to stop??... more >>
spyware???
Posted by Amy Moore at 1/18/2004 6:02:39 AM
The other nite I disabled my popup blocker to allow a
website to show pix - now I have something on my computer
that keeps asking me if I want to connect to the internet
or work offline.......thru my isp - it is using it's smart
dialer system. I have deleted cookies, temp files,
downloade... more >>
hacked
Posted by dan at 1/18/2004 5:54:07 AM
last night someone hacked onto my hotmail account and
altered all of my paswords so the i cant get on to it.
they have now got all of my addresses of my msn messenger
and i am worried that they might do the same to the
people on there. can any one give me some advice on
what to do.. m... more >>
homepage
Posted by little R at 1/17/2004 6:25:19 PM
In my internet options it shows several possible http's
for my homepage. I want to get rid of all but one of
these but cannot figure out how to any help would be
appreciated... more >>
spyware
Posted by Eric at 1/17/2004 1:06:49 PM
Hi guys,
I've got a question for you.
Everytime I access websites on IE I keep receiving
http//popnav.com or http//casinonav.com. Even off-line IE
goes to http//popnav.com.
I have tried spywareS7D and Ad-aware 6, deleteing the
cookies or even adding these sites to the restricted
sites, b... more >>
IIS security issue
Posted by Steven Burn at 1/17/2004 9:37:59 AM
Just wondering if IIS has any option for blocking direct linking and/or
downloading of certain file types (basically, so only my scripts can access
them, and only from my server)....... and if it has an option to block
programs such as IntelliTamper? (IntelliTamper allows literally anyone to
con... more >>
SSL Certficate
Posted by gkg620 NO[at]SPAM charter.net at 1/17/2004 8:45:44 AM
I am using Windows 2000 (not server) to serve up some web
pages. I want to create a SSL but am having trouble. I've
been all over MS's site and beginning to wonder if I can do
this since I'm not running 2000 server. I would prefer to
have the o/s create the certificate in lieu of purchasing
one... more >>
I have a Hacker
Posted by MeAgain at 1/17/2004 8:07:30 AM
I beleive someone i know is hacking my pc. This person i
have on msn messenger and of course sends emails. But i
dont want to confront this person until i know for sure.
Please could someone help to find out how i find out?
Thanks you in advance... more >>
Spyware Prob
Posted by JustMe at 1/17/2004 8:02:23 AM
I had mountains of probs. Downloaded spybot, found i had
380 spyware. (+ 1 hacker). Have put a general block on
recommended my spybot, but daily i get about 4 of them
back. Ideas on how to get rid of them completely?... more >>
n-CASE ?
Posted by non-techme at 1/17/2004 7:29:40 AM
When i open internet, i get a box saying "n-CASE Alert.
Warning. The system has detected that a third party
application has removed n-CASE, possibly without your
consent. This may cause someprograms not to run as
expected. Please chose an option below.... 1) re-install
n-CASE so that prog... more >>
Login problem
Posted by Steve at 1/16/2004 8:32:48 PM
We have a development website.
In IIS, the authentication method is "Integrated Windows authentication".
Typically, when a person goes to this site, they get a standard pop-up
asking for username and password.
I just came across a person that doesn't get this pop-up. He just gets the
stan... more >>
virtual directory security question...
Posted by Mike at 1/16/2004 5:06:40 PM
I'm trying to set up a page for certain customers to submit orders. I've
created a virtual directory with all the components for the page & added an
account to the server for them. My goal is for them to use the address
http://www.mysite.com/customer & be prompted for a username & password to
ge... more >>
iusr and iwan account have wrong machine name
Posted by Jim McCarthy at 1/16/2004 5:03:14 PM
does anyone know why or how iis would create iusr and iwan accounts with the
wrong machinename? The machine in question belongs to a w2k domain using ad.
... more >>
Access Denied where running an exe via an asp page
Posted by elie at 1/16/2004 2:24:58 PM
Hi,
I have built an executable that I would like to run using
an asp page. When I click on the executable everything run
smoothly, I can see the exe in the task manager and it is
doing what it is suppose to do.
The asp page I have built is very simple and is running
fine when I run Notepad... more >>
Restrict acces to only the root address?
Posted by NtKernel74 at 1/16/2004 11:26:10 AM
is it possible to restrict a user from going straight to a particular path opposed to having to navigate from the home page?
example: I don't want access straight to the address http://xxx.xxx.xxx.xxx/reports but instead want the user to go to the http://xxx.xxx.xxx.xxx home page and then navigat... more >>
Can I restrict access to certain IP's?
Posted by ***New_But_Learning at 1/16/2004 9:59:24 AM
Thanks Jonathan and Tom for the responses to my other question.
As I was trying them out, I was also thinking that I only need people from
one company to access our little web site. Looking at the log files so far,
it appears that everyone from that company shows a similar IP address.
Inste... more >>
Linking secured SSL domain with unsecure domain smoothly -- any ideas?
Posted by Jdaunoravicius NO[at]SPAM questarcapital.com at 1/16/2004 8:46:08 AM
I currently have a SSL domain where the SSL cert is applied to the
whole FQDN. So, the whole domain is https://***. Also, we have
another domain that does not have SSL. Using ASP, vbscript, and html,
I'm linking certain logos and pdf files from the unsecured domain to
the secured domain.
T... more >>
IIS vs. Remote Desktop (XP Pro)
Posted by Grumpy Aero Guy at 1/16/2004 7:18:44 AM
My XP box is set up with iis with the remote desktop
page/functionality
installed( ... /tsweb) .
When I try to connect to my XP box from work, from BEHIND
my companies
firewall (via IE5.5 on Windows 2000) using
http://xx.xx.xxx.xxx/tsweb/ , I
see the remote connection logon page of my XP... more >>
Administration Question
Posted by Doug B at 1/16/2004 4:56:29 AM
In windows XP Pro Is there a way of allowing a standard
user account that is not in the administrator group to
administer IIS without having to add them to the
administrator group of the local machine running IIS.... more >>
"Logon Locally" right needed?
Posted by Tim at 1/16/2004 2:26:45 AM
Hi
We are seeing this weird problem on a W2K server with IIS
installed. The server has 2 partitions, being the C:
(local) and D: (located on a SAN). For IIS, we use the
integrated Windows authentication.
When we create a virtual directory on the C-drive, we can
access it without any pr... more >>
Relocate IIS from Exchange Server
Posted by Dennis at 1/15/2004 7:37:39 PM
Hello,
Does anyone have experience and advice regarding the
procedure to relocate IIS for Outlook Web Access users
from the Exchange server to an alternate server dedicated
for web services?
Dennis... more >>
How can I restrict access to a folder on my IIS website?
Posted by ***New_But_Learning at 1/15/2004 4:58:49 PM
I have a web site that stores some HTML files in a folder. These HTML files
link to the public area of the website, but I would only like certain users
to be able to get them, so when someone clicks on the link, they get a user
name and password prompt.
Is there a way to do this without buyin... more >>
Remove an SSL certificate
Posted by SPT at 1/15/2004 4:28:20 PM
How do you move a certificate from one IIS 5.0 server and
install it on another?
Thanks,
Scott... more >>
Stopping porn pop ups?
Posted by Doug at 1/15/2004 12:36:22 PM
An unwanted site opens up every once in a while when I
open
IE. "http://66.54.89.203/toolbar/message/b/timerNofShtml?
action=start" How can I stop this from happening. I have
entered it in the security setting on restricted sites but
that doesn't help.... more >>
ASP and Error 404 - allowed and still won't show
Posted by Danielle at 1/15/2004 11:06:06 AM
I have allowed ASP in IIS, but when I try to view a page, I still get the 404 error message. I have made sure the necessary file is there and that it exists. But, I still get this error. Is there something else I should try
THanks for any help
Danielle... more >>
Cannot put site in high isolation
Posted by JR at 1/15/2004 7:34:19 AM
Hi,
I have a server with several hundred websites on it.
(Windows 2000 SP4 / IIS 5)
I am experiencing a problem when I try to set any of the
sites to run in High Isolation. If I choose High
Isolation and click OK or Apply I receive a dialog box
with the title of "IIS WWW Configuration"... more >>
IIS5 vs IIS6 ?
Posted by Eric at 1/15/2004 7:28:23 AM
Hello;
We have a custom application that uses http to
communicate from a workstation to an IIS server - the app
basically takes over Windows authentication (GinaDLL),
and authenticates the user through a database connected
to the web server.
This used to work flawlessly under Win2K ser... more >>
Check logs for Intrusion
Posted by Chris at 1/15/2004 7:21:17 AM
I need to track an attempted hack. The outsider used a
username and made sevral attempts to login bt was
unsuccessful. The Security logs states unknown username
and bad password, event id 529 and 681 at 12:26 AM. How do
I search the IIS logs for this intruders IP address?
Thanks in advanc... more >>
How safe is IIS on Windows XP
Posted by Ness at 1/15/2004 3:17:07 AM
Hi All,
Just wondering if anyone can tell me what the security is
like if I install the Windows XP Personal Web Server(IIS)
on my machine. Will I be more vulnerable considing I have
a cable internet connection. I was told in my uni class
not to install IIS on Windows 2000 if we have cable... more >>
ASP not working
Posted by Michael Law at 1/15/2004 3:04:27 AM
I host a site that runs classic ASP, but the site refuses
to run and when I check the security log it some up with
two 'failure audit' messages, basically
Type:Failure Audit
Source: Security
Category: Account Logon and Logon/Logoff
Event: 681 and 529
User: system
The first error (529) ... more >>
|