Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > iis security > february 2004 > threads for february 8 - 14, 2004

Filter by week: 1 2 3 4

Export Certificate from a website that imported a .PFX
Posted by Me at 2/14/2004 6:29:18 PM
Once an Export is made and instlalled on to another server, is it possible to export again from the server that is was imported into. In other words, you can only export from the server that the CSR we created from. Is this statement correct? Thanks ...more >>


question about deleted email
Posted by rtempl NO[at]SPAM verizon.net at 2/14/2004 5:16:49 AM
Feb.7th I rec'd email from a known source to my verizon mail site w/a virus.Luckily my norton went to work and saved me but my question is since my verizon mail goes through microsoft internet exployer can I find the or reproduce the senders address where verizon no longer has it after 48 ...more >>

How to send the certificate hierarchy from IIS?
Posted by ralphmengen NO[at]SPAM hotmail.com at 2/14/2004 2:50:34 AM
Hi! After trying to configure my IIS 5.0 (running on Windows 2000 server) to send the entire certificate hierarchy/chain to the client when the https communication is started, I concluded that this is impossible. Can anyone confirm this? Or is it possible and I just spent the last six days ...more >>

Creating Sub-Folders in IIS
Posted by 2shediac NO[at]SPAM rogers.com at 2/13/2004 1:01:02 PM
Using IIS on windows XP pro. We have a requirement for the com object to be able to create sub-folders within a folder on our web site So you would end up with a tree that looks like this \inetpub\wwwroot\a \inetpub\wwwroot\a\user1 \inetpub\wwwroot\a\user2 \inetpub\wwwroot\a\user3 T...more >>

undeletable spyware (?) files
Posted by Keith Hewitt at 2/13/2004 11:12:38 AM
How can I delete what are apparently spyware files that do not allow me access? In other words, I can't delete them. For example: C:\Program Files\AproposClient\Apropos.exe and C:\Program Files\eZula\mmod.exe thanks, Keith...more >>

Renewed Certificate not working
Posted by Hasnain at 2/13/2004 11:08:39 AM
Hi, I have got an strange issue. The problem is, I have just renewed a certificate but its not working i.e. it has been installed properly, visible in request and personal folder in 'certificate snap-in' in MMC, valid date till 2005 but.the site is inaccessible with https:// It was working ...more >>

Block Search Engines
Posted by A.M at 2/13/2004 10:34:23 AM
Hi, Is there any way to block a web site to be listed on search engines? For example if the dns name is www.companyname.com, google returns the address if someone searchs for "company name"; even if we don't submit the website on any saerch engine and there is no link to www.companyname.com ...more >>

How to name a SSL domain?
Posted by The Pistoleer at 2/12/2004 8:32:29 PM
Looking for some opinions on the FQDN for my SSL pages. My main site is accessed as: http://www.pistoleer.com or http://pistoleer.com Some options for the secure pages include, https://www.pistoleer.com https://pistoleer.com https://secure.pistoleer.com https://protected.pistoleer.com ht...more >>



IIS 6 ASP: Which Process Identity Is It Using? App Pool or Anon?
Posted by C K at 2/12/2004 5:16:35 PM
Hi, I am currently test running an old ASP application on IIS 6.0 and I have a question on what user identity is actually being used. I created a new application pool with its own service identity account (let's call it TestService, and added it to the IIS_WPG group) and assigned the web app ...more >>

"Access Denied" When creating a certificate request (CSR)
Posted by Cha Yang at 2/12/2004 12:33:19 PM
win 2003 server. IIS 6.0 logged in as Local Admin. Using Certificate Wizard. When finishing all steps to created the certificate request, I hit next to create the certificate request, I then get this error. I tried importing a cert from another 2003 server, and also get an access denied wh...more >>

SSL Certificate
Posted by Danielle at 2/12/2004 12:28:23 PM
We recently purchased a SSL certificate from Thawte. We created the cert request and waited to get the cert back from them. It took them a week to get us the cert. So in the meantime we had to install a temporary cert because we couldn't wait for the real one. In this process, we had to remo...more >>

SSL questions
Posted by Mike at 2/12/2004 10:24:42 AM
Please help I am looking to get a SSL Cert from Verisign and I have a domain name question/issue. I have a public FQDN for my domain and I want to run MS Outlook Web Access on my Windows 2003 Server running IIS 6.0. The issue I have is that the local domain name varies from the public doma...more >>

Integrated + Annonymous Security
Posted by Jeremy at 2/12/2004 7:28:39 AM
I am having some problems figuring out a good way to implement security that will comply with my sites requirements. Here is the situation: I need to allow anonymous connections to my site, but I also need to automatically log people in using their AD login information if it is present. O...more >>

content advisor password
Posted by MIK PITT at 2/12/2004 4:30:18 AM
Help Someone has managed to set a password on internet explorer 5.5 for the content advisor. No-one knows the password. Is there any way of re setting this as it is stopping me browse any sites without it. Operating system is windows 2000 Thanks in anticipation ...more >>

Database Locked!
Posted by Johann Montfort at 2/12/2004 1:59:19 AM
Dear All, I have inserted this piece of code:- path=server.mappath("../../../databases/") & "/merlin.mdb" Set fso = CreateObject("Scripting.FileSystemObject") Set f = fso.GetFile(path) lastmodified=f.DateLastModified lastmodified=dateAdd ("h",6,lastmodified) so that I can determine wh...more >>

FTP file blocked
Posted by Alicia Molina at 2/11/2004 3:56:11 PM
Hi, There are some times that in my FTP server (IIS 5.0) when a user upload files these files are blocked and not is possible to delete them, not even the administrator can delete the files. The files are unblocked single when it spends a time or when is reinitiated the FTP service. Why ca...more >>

UrlScan and IISLockdown
Posted by A.M at 2/11/2004 2:31:31 PM
Hi, Do we still need to use UrlScan and IIDLockDown on IIS6.0 I am asking this because i heared about security improvement on IIS6.0 and those tools has been developed during IIS 5 time. Thanks, Ali ...more >>

iis 6 question about accessing url on it
Posted by zoomer at 2/11/2004 2:13:38 PM
I have a new site I created, I can access just fine at http://localhost I can also go to another machine on my lan and type http://servername however, if I type http://FQDN (the AD FDQN for this server on the lan) I get prompted with a login box, weird huh? I don't understand what the differ...more >>

Can a SSL certificate be transfered?
Posted by The Pistoleer at 2/11/2004 12:27:46 PM
Can a SSL certificate be transfered from one IIS6 server to another IIS6 server (different IP, and different zipcode, but same domain)? Or will I need to purchase another certificate? Pete http://www.Pistoleer.com - Retail & Wholesale (PH/FX 618-288-4588) ____________________________________...more >>

SSL Certificate management
Posted by RRJ360 NO[at]SPAM YAHOO.COM at 2/11/2004 8:58:10 AM
I recently installed a Verisign certificate into my website using the IIS 6 MMC. I created a Enterprise Root CA on the domain server and a Subordinate Root CA on the web server to manage certificates. The certificate does not show in either CA. What step have I missed?...more >>

Using existing SSL certificate in new server
Posted by John at 2/11/2004 6:42:06 AM
Hi, I have not done this before of using an existing certificate in the new server. We have a new production machine which needs to have SSL enabled. There is already an existing SSL certificate on the old production server. I need to get this certificate to be installed on the new serv...more >>

Basic authentication help needed
Posted by cal at 2/11/2004 3:21:41 AM
Can someone direct me to directions to set up basic win authentication on a webpage running IIS 6? We want to make it so that when users go to a site, they get prompted for their windows username and password before they can see the page. We set something up but I think we did it wrong ...more >>

Microsoft Securith Notification Service
Posted by Hermiz Bado at 2/11/2004 1:52:56 AM
Hi,I tried to download "Microsoft Security Notification Service" from MS Website.But I got an Error message & was directed to contact MS product support,which I couldn't. I have Windows 98SE and use Internet Explorer 6 SP1. Is there a way to download the above mentioned Service or ...more >>

HTTP to HTTPS in IIS
Posted by Yake at 2/11/2004 12:21:07 AM
Hell I having a dilemma about the security on a page that I have developed. My problem is that I'm not sure if a page in http that sends a post form to HTTPS is secure? Is the post data secured before the HTTP post request is send to the HTTPS page thanks regards yake...more >>

NT4 support IAS?
Posted by Brian O'Halloran at 2/10/2004 9:44:22 PM
Does anyone know if NT4 suports IAS (Internet Authentication Service)? Or, does one have to upgrade NT4 to Win 2000? Thanks, Brian...more >>

Forms Authentication for subdirectories of an app
Posted by Grant Harmeyer at 2/10/2004 6:35:03 PM
I would like to have a directory that is Forms authenticated so that all ASP.NET resources contained within the directory require a logged on user. Per spec, I have to accomplish this through the use of the <location /> element in the web.config file. I have written the code that authenticates t...more >>

HOTMAIL
Posted by NEA at 2/10/2004 5:57:57 PM
I CANNOT ACCESS MY HOTMAIL ACCOUNT OR ANY SECURE WEBSITES. I CHECKED MY SECURITY SETTINGS AND EVERYTHING COMES UP FINE. WHAT AM I DOING WRONG...more >>

win95 authenticated on IIS 5.0
Posted by Guy Painchaud at 2/10/2004 5:43:10 PM
DEsktops NT4, W2k and XP don't have any problems to authenticate on a web serveur w2k sp3. But a Win95 give a error when authenticating. the win95 has IE5 and receive the logon Windows but give an unsolved dns error. notes: SSL is not in use The IIS use the basic authentication method. ...more >>

IIS 5 - Timeout Setting questions and problem
Posted by Michael at 2/10/2004 4:11:33 PM
I have a question about 2 setting in the Internet Services Manager for IIS 5. In the properties on the default website, on the WebSite tab. There is a section called Connections with a Connection Timeout value of 900 seconds. On the Home Directory Tab, in the Application Settings section, w...more >>

Disable trace and track verbs
Posted by Rob at 2/10/2004 3:52:00 PM
I have installed URLScan and i am still get a respond on my web site to trace and track commands. I thought URLScan 2.5 woul take care of it. I have the AllowVerbs set to 1 and then the very TRACE and track are not in that section. Any ideas?...more >>

xyz: Obtain certificate from request
Posted by Ravi at 2/10/2004 1:51:40 PM
I have a standalone server behind a load balancer/application switch. The server does not have a DNS name. Users access the web-site using the ip address of the server. I followed the steps outlinei in article Q299525 . In step 1.h I gave the ip address of the box as the common name. Proc...more >>

How do I obtain a certificate
Posted by Ravi at 2/10/2004 12:49:02 PM
I created a certificate request. My server is a standalone server that does not have a DNS entry and is behind a loadbalancer/application switch. Users would access the server with a fully quallified IP address. I followed the steps in Article Q299525 till step 1.g. For 1.h I gave the IP a...more >>

OWA losing basic authentication domain
Posted by Ray at 2/10/2004 10:56:06 AM
I have a Windows 2000 SP4 member server with IIS and Exchange 5.5. We are publishing the Exchange VRoot with Basic Authentication turned on and our domain to authenticate selected. A few weeks ago when logging into Exchange OWA the mailbox would never load into the browser and it would just hang o...more >>

Restrict IIS Admins to only administre IIS and directories
Posted by Alex at 2/10/2004 9:54:24 AM
Hi all I have just set up a new windows 2003 server with IIS 6.0 I want my IIS administrators to be able to administre the IIS (create new sites and so on) but i do not want the to be able to install new programs on the server. So i don't want them being a member of the local administrato...more >>

Can't download files with certain extensions
Posted by Max Harris at 2/10/2004 12:46:05 AM
I'm running IIS 6.0 on Windows 2003 Server. I've written an application that lets users upload files to a folder on the server. The upload feature works well, no matter the size or type of the file uploaded. The problem lies in the downloading of some of the files after they're uploaded. I'...more >>

HTTP 401.3 - Access denied by ACL on resource
Posted by purab at 2/9/2004 1:55:19 PM
i can access the webfiles using IE but when i use netscape iam getting errors..its not even showing up default localhost page ..its asking for username and password and when i enter the information it sayd authorization failed with message HTTP 401.3 - Access denied by ACL on resource.. d...more >>

IIS 6.0 - File Not Found - Windows 2003?
Posted by abcd at 2/9/2004 1:53:38 PM
My apology if this is not the correct group to answer this ==> My web application is written in ASP, I am testing that under IIS 6.0 and Windows 2003 standard edition...Everything works great ! except I am geting file not found error.... the problm is like this...my application generates ...more >>

Help!!! with a Trial SSL Cert
Posted by Mike at 2/9/2004 11:33:44 AM
I have a Trial SSL Cert from Verisign and followed the instructions to get the cert and install the cert, but I am having trouble configuring the web server to allow access to the site via a SSL connection. ...more >>

IWAM and IUSR
Posted by Tony Talmage at 2/9/2004 9:12:39 AM
I recently made a post on a couple Win2k newsgroups, but I believe the post was OT and thus ignored, which I expected; hopefully this NG is better suited for my question. Anyhow, I am trying to use ASP to add IIS accounts to a Win2k server, and apparently, without modifications, I am required to...more >>

iis and integrated security under XP Pro
Posted by Frank at 2/9/2004 8:41:10 AM
A very basic question which I am unable to solve: I am trying to get a demo running on an XP Pro machine. Within this demo I want to use the integrated authentication option of IIS. I created a virtual directory and placed a simple html file inside this directory. When I access from this file a...more >>

download PDF file with HTTPS
Posted by Claudio Zorzin at 2/9/2004 8:06:08 AM
I'have an asp page that creates a pdf file in a folder,this page works with http Now I have installed https on IIS5 and my browser is not able to download the pdf file, the error is "unable to find the site..." If I choose advanced option of IE6.0 and I select "do not save crypt pages onto the dis...more >>

map network drive from asp process
Posted by Serge at 2/9/2004 5:42:07 AM
Hi, i would map a network drive from a share on another server. it works fine with the net use command under user login but it do not work from an asp script or dll. is this that i have to add the iuser_<computer_name> profile into network computer that share it resources? Thanks a l...more >>

Kerberos authentication under IIS 5
Posted by Andrew Howles at 2/9/2004 3:58:48 AM
Hi everybody, I have IIS 5 running on a couple of Win 2k servers in a Win2k ActiveDirectory domain. I've set things up for Kerberos authentication, as per this KB article: http://support.microsoft.com/?id=215383 Everything works fine provided I use three separate machines, as per the ...more >>

IIS Access denied for anonymous users
Posted by Andre at 2/9/2004 1:29:46 AM
I'm hosting a site on IIS, but when I try to access it from the internet I get a sign-in box, and then Error: Access is Denied message. If I fill out a valid username and password I can access the web site. But want users to access my site without a password. I've enabled anonymous access...more >>

IIS under SSL causes Mac problem after Win 2003 upgrade
Posted by Mike Densem at 2/8/2004 7:04:45 PM
I recently upgraded the DC to 2003. On the domain I also have two web servers. When I finished the DC upgrade I discovered that Mac clients can no longer submit website forms (POST) using IE under SSL to the web servers - both still Win 2000. Has anyone else seen or heard of this? More info...more >>

? How to set FTP session time limits ?
Posted by TJ at 2/8/2004 3:43:06 PM
W2K3 OS w/IIS6.0 (All updates/patches) Using the default FTP feature within The goal is to limit FTP logon's to allow a predertimed time, either per general session or per user. I've been searching through the components properties to enable a FTP session time limit, but am unable to loca...more >>

Receiving winnt\system32\cmd.exe popup
Posted by Cole at 2/8/2004 3:26:07 PM
Help!!! When I run Explorer, I get a black popup that prevents me from, temporarily, doing anything. The top of it says" winnt\system32\cmd.exe" and sometimes it tells me that I can type in "net helpmsg 2310" but I can't type it- the window disappears...HELP!!!...more >>


DevelopmentNow Blog