Groups | Blog | Home


Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > iis security > january 2004 > threads for january 15 - 21, 2004

Filter by week: 1 2 3 4 5

File download problem in IIS6.0
Posted by Manuel Delgado at 1/21/2004 1:10:50 PM
Hi there, I'm having trouble with my first IIS6.0 on Windows Server 2003. The web site works fine: all ASP pages are processed and displayed normally. The problem is we are not able to download any files from the site (pdf, zip, doc, ...) When you click on a link pointing to one of these fil...more >>


IIS and Microsoft CA (windows 2003)
Posted by Charles at 1/21/2004 12:21:21 PM
When I install the certificate services on a windows 2003 server, I am able to set my website up to use https. My question is when I view the website from the internet, I get the message "Revocation information for security certificate ...not available", was this type of setup not make fo...more >>

Outlook Address Book Access
Posted by Kathy at 1/21/2004 11:17:16 AM
My children go to a school that uses Outlook. Recently kids have been sending harrassing emails to the entire school by highlighting everyone's address in the system address book. Is there a way to take away their ability to access this address book? ...more >>

SUS kills asp pages after install
Posted by Michael at 1/21/2004 10:21:06 AM
I ran the sus install and it killed my website no asp pages will work. i have runt heundo and unsinstalled urlscan but the pages are still down. That is the error I get Microsoft VBScript runtime error '800a01a8' Object required: 'Session' /webh/login.asp, line 5 ...more >>

IIS 5 bandwidth throttling
Posted by Adds at 1/21/2004 9:22:42 AM
Morning. One of the servers we host is using too much bandwidth and we'd like to be able to limit that amount of bandwidth available for a particular virtual web site (or, if not possible, the machine itself - It's almost dedicated). The problem is that the site in question uses about 95% dy...more >>

windows NT 4.0 Hotfix installation did not complete
Posted by HUBCO at 1/21/2004 8:15:34 AM
HI there; I have a Windows NT 4.0 Server running IIS, and every time I try to install a hot-fix I get the following windows boxes after the installation: Box #1: Installation was successful Box #2: Windows NT 4.0 Hot fix installation did not complete I need to apply the hot-fixes to pr...more >>

Allow non admin user to manage IIS 6.0
Posted by JR at 1/21/2004 7:55:38 AM
Hello, I would like to allow a non administrator user the rights to manage all functions of IIS within a server. Is this possible? I can't seem to find anything under the local security policy. Thanks! JR...more >>

Outlook express error "MSIMN has caused error in directdb.dll"
Posted by Seamus O' Leary at 1/21/2004 7:51:06 AM
Outllook express can not receive emails. I get the error message msimn has cuased an error in directdb.dll Any help pleas Seamus@iht.ie...more >>



Load balance behind Cisco content switch yields 401 errors
Posted by kgould NO[at]SPAM yahoo.com at 1/21/2004 6:56:09 AM
Situation: 2 servers, ksovetapp001 ksovetapp002 We're load balancing between them with a Cisco content switch with DNS name CCXAPP. When we access pages anonymously, it works fine. If we access pages requiring authentication (integrated is set) we get: 2004-01-21 14:50:30 10.x.x.16 GET /Ge...more >>

HACKER visits my web site
Posted by Chrsi Grady at 1/20/2004 6:43:03 PM
HACKER! Hardware: Pentium 4 2.53 Ghz with 512 RAM Operating System: Windows XP Pro w/Service Pack 1 IIS V5.1 is installed and operating Server Extensions are now turned OFF My personal webpage was recently hacked/defaced. I would like to determine how 1) this happened; and 2) how this t...more >>

Another type of access needed to 'save as' and .htm in IIS 6?
Posted by RiverCoyote at 1/20/2004 4:56:06 PM
Hey there, Migrated an IIS 5 on Windows 2000 site to IIS 6 on 2003 Web Edition server. Everything is working great, EXCEPT: Have a UNC share mapped to a share inside the intranet which is part of the main site, not a separate site. They simply (used to) open the share, and using their Modify...more >>

Multiple sites using SSL on same IIS server
Posted by Fred at 1/20/2004 2:56:07 PM
We have an extranet server hosting two sites, using SSL. One is port 443 (default site), the other is port 444. We have two security certificates installed, one for each site. However, when we browse to the second site (port 444), and view the certificate the one that comes up in the bro...more >>

Folder with no NAME
Posted by Dumb Founded at 1/20/2004 12:21:56 PM
A folder was found on our WEB server running Adv 2000, in the wwwroot folder. It had no name and had several hundred subfolders which each had several hunder more subfolders. When we tryed to delet or move the folder an access denied dialog box appeared. Has any one reported this before....more >>

Redirecting to custom .aspx error page?
Posted by swheatley22 NO[at]SPAM yahoo.com at 1/20/2004 12:19:15 PM
I found the following posting, http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&oe=utf-8&selm=Rnw8J81PCHA.1712%40cpmsftngxa07 which loosely explains how to do a joint NTLM/Passport authenticated site, with a database for roles. I have been able to modify this slightly to work for my own for...more >>

FTP Accounts
Posted by Jim Wilson at 1/20/2004 11:28:38 AM
I'm new to setting up an FTP server. Can someone tell me what I need to do to give write access to someone out side of my domain? ...more >>

IIS 5.0 and access via IP
Posted by Eddie at 1/20/2004 9:46:51 AM
I have a question about granting access to a web site across domains. I have a web site that allows IUSER_Servername to access it within my domain, but I was asked to allow a certain user from a different domain with static IP access to the web site, but there is no trust relationship betwe...more >>

Locally created certificate for web site - works?
Posted by Bruce Piper at 1/20/2004 9:13:25 AM
Hello, Can I create a certificate for my web-site to turn on SSL or do I have to purchase a certificate from Verisign to allow SSL on my public web site? Bruce...more >>

IIS Directory Security Resets after restarting Services or Reboot
Posted by Jason Smith at 1/20/2004 5:06:56 AM
My IIS Directory Security resets for my Exchange Web Outlook. The security resets to integrated Windows Authentication. In order for my users to log in, Anonymous log in and Basic Authentication need to be checked, but after the server restarts (or services restarted) the Basica Authenti...more >>

search pop up
Posted by jenks at 1/20/2004 12:03:40 AM
i keep getting an annoying search popup when surfing the internet. how do i remove it so it doesn't continue. the web address is 1)http://globefinder.net/344012 2)http://outtruecounter.com...more >>

IIS 6.0 SITE USING SSL
Posted by DAN at 1/19/2004 11:11:49 PM
Hey everyone. I know this is a fairly simple question, but I'm having some trouble. I want to setup a site to use SSL, but when I go to the site using https nothing shows up. I'm not concerned with getting a certificate just yet, I just want to access the site without one for now. I know t...more >>

Funky Log entry
Posted by Joseph at 1/19/2004 9:20:08 PM
Found this followed by a 404 what is it? default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX%u9 090%u6...more >>

microsoft
Posted by anonymous sender at 1/19/2004 5:22:30 PM
i have ended up here in vain, i am trying to configure a Nokia communicator with my home pc(xp operating system, but when i try to synchronisethe two together, i get an error box up saying that it could not open the microsoft exchange server, and i do not actually know how to put the setti...more >>

generate SSL certifikate
Posted by tex at 1/19/2004 3:16:22 PM
Hi, can I generate certifikate by myself ? I have certreq.txt (from my IIS) and I need generate certreq.cer Tex. ...more >>

NT Challenge prevents user from getting in
Posted by Tom at 1/19/2004 1:46:56 PM
I am using the NT Challenge on IIS without anonymous access to ensure that only those who have access to the network can access the web site. Problem is a user who has access to network, but is repeatedly asked to re-enter his user information and it never allows him in. I can't think why...more >>

Certificate usage
Posted by Patrick at 1/19/2004 1:45:43 PM
I have installed an SSL certificate on a web server. Now, I want to replace that server with a new server. I would like to use the same certificate on that new server, which would have the same DNS name, machine name, etc. Both machines use IIS5.1 under Windows 2000 Server. I note from IIS->...more >>

SSL and a CA
Posted by rob at 1/19/2004 1:12:06 PM
I would like to use our own internal CA to issue a certificate for our intranet web sites. These servers are accessed from inside, but also from outside of our network as well. Do remote clients need any type of access to our internal CA server? If so what? Can you please explain? Tha...more >>

Newbie 5.0 security question
Posted by enaitee at 1/19/2004 12:35:25 PM
Hi..After a lot of web searching and reading I finally got IIS working on my W2000 system. I had never heard of it prior to setting out to learn how to make web sites interactive with cgi scripts. My need for it is, for now at least, to test web site coding prior to uploading to my online serv...more >>

Messenger Services popups
Posted by omar at 1/19/2004 10:54:11 AM
Recently I'm recieving this nasty popups on messanger services and there is no way to get rid of them, Norton can not fix them and they latch in some sort of program called hotbar or tool bar. I have tried deleting them but they come back. I even went to the registry and erase every .dll a...more >>

IUSR_computername security question
Posted by Jon at 1/19/2004 8:36:03 AM
I've always understood that you need to have the IUSR_computername account setup with read access on the NTFS directory where you keep your website files. Is this correct? Reason I'm asking, is that I removed the account, and my IIS6 website still works just fine. I'm trying to tighten ...more >>

Preventing multiple login prompts when using 2 different domains
Posted by Jdaunoravicius NO[at]SPAM questarcapital.com at 1/19/2004 12:43:36 AM
We have 2 domains for internal purposes: one for users (have to login and domain has SSL) and another for sponsors (have to login and domain does NOT have SSL). Now when a user logs in and there are pages that have info from the sponsors domain, users are asked to login again with a warning me...more >>

IDQ, IDA, HTX files cannot be placed on a network share?
Posted by Khoa Le at 1/18/2004 11:08:11 PM
Hi all, I am new to index/iis server 5.0. Currently a virtual web site is hosting on iis 5.0 server but all of its files are on a different server, on a file server. The index service is also installed on the IIS server. A catalog is configured on the IIS server, but all IDQ, IDA, and HTX...more >>

Single Sing-on?
Posted by ML at 1/18/2004 10:05:29 PM
I've got two IIS servers, one 5 the other 6, hosting two sites. Both are part of the same AD name, and I now need to provide single sign on capabilities to the two sites. They are both set up to use Integrated Authentication. Users inside the network can get on without being prompted, as expec...more >>

Can't Access Web Site after changing ISUR_ Security Settings
Posted by Rick at 1/18/2004 1:03:51 PM
I changed the default security settings for IUSR and all of the ISUR accounts changed to the new settings. Is there an easy way to get the IUSR account set back to default so the website can be acessed by the public?...more >>

Cant get rid of the auto finisher
Posted by Cool at 1/18/2004 11:57:34 AM
when i type a website in or use a search engine it automatically finishes it for me how do i get it to stop??...more >>

spyware???
Posted by Amy Moore at 1/18/2004 6:02:39 AM
The other nite I disabled my popup blocker to allow a website to show pix - now I have something on my computer that keeps asking me if I want to connect to the internet or work offline.......thru my isp - it is using it's smart dialer system. I have deleted cookies, temp files, downloade...more >>

hacked
Posted by dan at 1/18/2004 5:54:07 AM
last night someone hacked onto my hotmail account and altered all of my paswords so the i cant get on to it. they have now got all of my addresses of my msn messenger and i am worried that they might do the same to the people on there. can any one give me some advice on what to do.. m...more >>

homepage
Posted by little R at 1/17/2004 6:25:19 PM
In my internet options it shows several possible http's for my homepage. I want to get rid of all but one of these but cannot figure out how to any help would be appreciated...more >>

spyware
Posted by Eric at 1/17/2004 1:06:49 PM
Hi guys, I've got a question for you. Everytime I access websites on IE I keep receiving http//popnav.com or http//casinonav.com. Even off-line IE goes to http//popnav.com. I have tried spywareS7D and Ad-aware 6, deleteing the cookies or even adding these sites to the restricted sites, b...more >>

IIS security issue
Posted by Steven Burn at 1/17/2004 9:37:59 AM
Just wondering if IIS has any option for blocking direct linking and/or downloading of certain file types (basically, so only my scripts can access them, and only from my server)....... and if it has an option to block programs such as IntelliTamper? (IntelliTamper allows literally anyone to con...more >>

SSL Certficate
Posted by gkg620 NO[at]SPAM charter.net at 1/17/2004 8:45:44 AM
I am using Windows 2000 (not server) to serve up some web pages. I want to create a SSL but am having trouble. I've been all over MS's site and beginning to wonder if I can do this since I'm not running 2000 server. I would prefer to have the o/s create the certificate in lieu of purchasing one...more >>

I have a Hacker
Posted by MeAgain at 1/17/2004 8:07:30 AM
I beleive someone i know is hacking my pc. This person i have on msn messenger and of course sends emails. But i dont want to confront this person until i know for sure. Please could someone help to find out how i find out? Thanks you in advance...more >>

Spyware Prob
Posted by JustMe at 1/17/2004 8:02:23 AM
I had mountains of probs. Downloaded spybot, found i had 380 spyware. (+ 1 hacker). Have put a general block on recommended my spybot, but daily i get about 4 of them back. Ideas on how to get rid of them completely?...more >>

n-CASE ?
Posted by non-techme at 1/17/2004 7:29:40 AM
When i open internet, i get a box saying "n-CASE Alert. Warning. The system has detected that a third party application has removed n-CASE, possibly without your consent. This may cause someprograms not to run as expected. Please chose an option below.... 1) re-install n-CASE so that prog...more >>

Login problem
Posted by Steve at 1/16/2004 8:32:48 PM
We have a development website. In IIS, the authentication method is "Integrated Windows authentication". Typically, when a person goes to this site, they get a standard pop-up asking for username and password. I just came across a person that doesn't get this pop-up. He just gets the stan...more >>

virtual directory security question...
Posted by Mike at 1/16/2004 5:06:40 PM
I'm trying to set up a page for certain customers to submit orders. I've created a virtual directory with all the components for the page & added an account to the server for them. My goal is for them to use the address http://www.mysite.com/customer & be prompted for a username & password to ge...more >>

iusr and iwan account have wrong machine name
Posted by Jim McCarthy at 1/16/2004 5:03:14 PM
does anyone know why or how iis would create iusr and iwan accounts with the wrong machinename? The machine in question belongs to a w2k domain using ad. ...more >>

Access Denied where running an exe via an asp page
Posted by elie at 1/16/2004 2:24:58 PM
Hi, I have built an executable that I would like to run using an asp page. When I click on the executable everything run smoothly, I can see the exe in the task manager and it is doing what it is suppose to do. The asp page I have built is very simple and is running fine when I run Notepad...more >>

Restrict acces to only the root address?
Posted by NtKernel74 at 1/16/2004 11:26:10 AM
is it possible to restrict a user from going straight to a particular path opposed to having to navigate from the home page? example: I don't want access straight to the address http://xxx.xxx.xxx.xxx/reports but instead want the user to go to the http://xxx.xxx.xxx.xxx home page and then navigat...more >>

Can I restrict access to certain IP's?
Posted by ***New_But_Learning at 1/16/2004 9:59:24 AM
Thanks Jonathan and Tom for the responses to my other question. As I was trying them out, I was also thinking that I only need people from one company to access our little web site. Looking at the log files so far, it appears that everyone from that company shows a similar IP address. Inste...more >>

Linking secured SSL domain with unsecure domain smoothly -- any ideas?
Posted by Jdaunoravicius NO[at]SPAM questarcapital.com at 1/16/2004 8:46:08 AM
I currently have a SSL domain where the SSL cert is applied to the whole FQDN. So, the whole domain is https://***. Also, we have another domain that does not have SSL. Using ASP, vbscript, and html, I'm linking certain logos and pdf files from the unsecured domain to the secured domain. T...more >>

IIS vs. Remote Desktop (XP Pro)
Posted by Grumpy Aero Guy at 1/16/2004 7:18:44 AM
My XP box is set up with iis with the remote desktop page/functionality installed( ... /tsweb) . When I try to connect to my XP box from work, from BEHIND my companies firewall (via IE5.5 on Windows 2000) using http://xx.xx.xxx.xxx/tsweb/ , I see the remote connection logon page of my XP...more >>

Administration Question
Posted by Doug B at 1/16/2004 4:56:29 AM
In windows XP Pro Is there a way of allowing a standard user account that is not in the administrator group to administer IIS without having to add them to the administrator group of the local machine running IIS....more >>

"Logon Locally" right needed?
Posted by Tim at 1/16/2004 2:26:45 AM
Hi We are seeing this weird problem on a W2K server with IIS installed. The server has 2 partitions, being the C: (local) and D: (located on a SAN). For IIS, we use the integrated Windows authentication. When we create a virtual directory on the C-drive, we can access it without any pr...more >>

Relocate IIS from Exchange Server
Posted by Dennis at 1/15/2004 7:37:39 PM
Hello, Does anyone have experience and advice regarding the procedure to relocate IIS for Outlook Web Access users from the Exchange server to an alternate server dedicated for web services? Dennis...more >>

How can I restrict access to a folder on my IIS website?
Posted by ***New_But_Learning at 1/15/2004 4:58:49 PM
I have a web site that stores some HTML files in a folder. These HTML files link to the public area of the website, but I would only like certain users to be able to get them, so when someone clicks on the link, they get a user name and password prompt. Is there a way to do this without buyin...more >>

Remove an SSL certificate
Posted by SPT at 1/15/2004 4:28:20 PM
How do you move a certificate from one IIS 5.0 server and install it on another? Thanks, Scott...more >>

Stopping porn pop ups?
Posted by Doug at 1/15/2004 12:36:22 PM
An unwanted site opens up every once in a while when I open IE. "http://66.54.89.203/toolbar/message/b/timerNofShtml? action=start" How can I stop this from happening. I have entered it in the security setting on restricted sites but that doesn't help....more >>

ASP and Error 404 - allowed and still won't show
Posted by Danielle at 1/15/2004 11:06:06 AM
I have allowed ASP in IIS, but when I try to view a page, I still get the 404 error message. I have made sure the necessary file is there and that it exists. But, I still get this error. Is there something else I should try THanks for any help Danielle...more >>

Cannot put site in high isolation
Posted by JR at 1/15/2004 7:34:19 AM
Hi, I have a server with several hundred websites on it. (Windows 2000 SP4 / IIS 5) I am experiencing a problem when I try to set any of the sites to run in High Isolation. If I choose High Isolation and click OK or Apply I receive a dialog box with the title of "IIS WWW Configuration"...more >>

IIS5 vs IIS6 ?
Posted by Eric at 1/15/2004 7:28:23 AM
Hello; We have a custom application that uses http to communicate from a workstation to an IIS server - the app basically takes over Windows authentication (GinaDLL), and authenticates the user through a database connected to the web server. This used to work flawlessly under Win2K ser...more >>

Check logs for Intrusion
Posted by Chris at 1/15/2004 7:21:17 AM
I need to track an attempted hack. The outsider used a username and made sevral attempts to login bt was unsuccessful. The Security logs states unknown username and bad password, event id 529 and 681 at 12:26 AM. How do I search the IIS logs for this intruders IP address? Thanks in advanc...more >>

How safe is IIS on Windows XP
Posted by Ness at 1/15/2004 3:17:07 AM
Hi All, Just wondering if anyone can tell me what the security is like if I install the Windows XP Personal Web Server(IIS) on my machine. Will I be more vulnerable considing I have a cable internet connection. I was told in my uni class not to install IIS on Windows 2000 if we have cable...more >>

ASP not working
Posted by Michael Law at 1/15/2004 3:04:27 AM
I host a site that runs classic ASP, but the site refuses to run and when I check the security log it some up with two 'failure audit' messages, basically Type:Failure Audit Source: Security Category: Account Logon and Logon/Logoff Event: 681 and 529 User: system The first error (529) ...more >>


DevelopmentNow Blog