all groups > iis security > february 2004 > threads for february 8 - 14, 2004
Filter by week: 1 2 3 4
Export Certificate from a website that imported a .PFX
Posted by Me at 2/14/2004 6:29:18 PM
Once an Export is made and instlalled on to another server, is it possible
to export again from the server that is was imported into.
In other words, you can only export from the server that the CSR we created
from. Is this statement correct?
Thanks
... more >>
question about deleted email
Posted by rtempl NO[at]SPAM verizon.net at 2/14/2004 5:16:49 AM
Feb.7th I rec'd email from a known source to my verizon
mail site w/a virus.Luckily my norton went to work and
saved me but my question is since my verizon mail goes
through microsoft internet exployer can I find the or
reproduce the senders address where verizon no longer has
it after 48 ... more >>
How to send the certificate hierarchy from IIS?
Posted by ralphmengen NO[at]SPAM hotmail.com at 2/14/2004 2:50:34 AM
Hi!
After trying to configure my IIS 5.0 (running on Windows 2000 server)
to send the entire certificate hierarchy/chain to the client when the
https communication is started, I concluded that this is impossible.
Can anyone confirm this? Or is it possible and I just spent the last
six days ... more >>
Creating Sub-Folders in IIS
Posted by 2shediac NO[at]SPAM rogers.com at 2/13/2004 1:01:02 PM
Using IIS on windows XP pro.
We have a requirement for the com object to be able to create
sub-folders within a folder on our web site
So you would end up with a tree that looks like this
\inetpub\wwwroot\a
\inetpub\wwwroot\a\user1
\inetpub\wwwroot\a\user2
\inetpub\wwwroot\a\user3
T... more >>
undeletable spyware (?) files
Posted by Keith Hewitt at 2/13/2004 11:12:38 AM
How can I delete what are apparently spyware files that
do not allow me access? In other words, I can't delete
them. For example:
C:\Program Files\AproposClient\Apropos.exe and
C:\Program Files\eZula\mmod.exe
thanks,
Keith... more >>
Renewed Certificate not working
Posted by Hasnain at 2/13/2004 11:08:39 AM
Hi,
I have got an strange issue.
The problem is, I have just renewed a certificate but its not working i.e.
it has been installed properly, visible in request and personal folder in
'certificate snap-in' in MMC, valid date till 2005 but.the site is
inaccessible with https:// It was working ... more >>
Block Search Engines
Posted by A.M at 2/13/2004 10:34:23 AM
Hi,
Is there any way to block a web site to be listed on search engines?
For example if the dns name is www.companyname.com, google returns the
address if someone searchs for "company name"; even if we don't submit the
website on any saerch engine and there is no link to www.companyname.com ... more >>
How to name a SSL domain?
Posted by The Pistoleer at 2/12/2004 8:32:29 PM
Looking for some opinions on the FQDN for my SSL pages.
My main site is accessed as:
http://www.pistoleer.com or http://pistoleer.com
Some options for the secure pages include,
https://www.pistoleer.com
https://pistoleer.com
https://secure.pistoleer.com
https://protected.pistoleer.com
ht... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
IIS 6 ASP: Which Process Identity Is It Using? App Pool or Anon?
Posted by C K at 2/12/2004 5:16:35 PM
Hi,
I am currently test running an old ASP application on IIS 6.0 and I have a
question on what user identity is actually being used. I created a new
application pool with its own service identity account (let's call it
TestService, and added it to the IIS_WPG group) and assigned the web app ... more >>
"Access Denied" When creating a certificate request (CSR)
Posted by Cha Yang at 2/12/2004 12:33:19 PM
win 2003 server. IIS 6.0
logged in as Local Admin.
Using Certificate Wizard. When finishing all steps to
created the certificate request, I hit next to create the
certificate request, I then get this error. I tried
importing a cert from another 2003 server, and also get
an access denied wh... more >>
SSL Certificate
Posted by Danielle at 2/12/2004 12:28:23 PM
We recently purchased a SSL certificate from Thawte. We created the cert
request and waited to get the cert back from them. It took them a week to
get us the cert. So in the meantime we had to install a temporary cert
because we couldn't wait for the real one. In this process, we had to
remo... more >>
SSL questions
Posted by Mike at 2/12/2004 10:24:42 AM
Please help
I am looking to get a SSL Cert from Verisign and I have a domain name
question/issue.
I have a public FQDN for my domain and I want to run MS Outlook Web Access
on my Windows 2003 Server running IIS 6.0. The issue I have is that the
local domain name varies from the public doma... more >>
Integrated + Annonymous Security
Posted by Jeremy at 2/12/2004 7:28:39 AM
I am having some problems figuring out a good way to
implement security that will comply with my sites
requirements. Here is the situation:
I need to allow anonymous connections to my site, but I
also need to automatically log people in using their AD
login information if it is present. O... more >>
content advisor password
Posted by MIK PITT at 2/12/2004 4:30:18 AM
Help
Someone has managed to set a password on internet explorer
5.5 for the content advisor. No-one knows the password. Is
there any way of re setting this as it is stopping me
browse any sites without it. Operating system is windows
2000
Thanks in anticipation ... more >>
Database Locked!
Posted by Johann Montfort at 2/12/2004 1:59:19 AM
Dear All,
I have inserted this piece of code:-
path=server.mappath("../../../databases/") & "/merlin.mdb"
Set fso = CreateObject("Scripting.FileSystemObject")
Set f = fso.GetFile(path)
lastmodified=f.DateLastModified
lastmodified=dateAdd ("h",6,lastmodified)
so that I can determine wh... more >>
FTP file blocked
Posted by Alicia Molina at 2/11/2004 3:56:11 PM
Hi,
There are some times that in my FTP server (IIS 5.0) when a user upload
files these files are blocked and not is possible to delete them, not even
the administrator can delete the files.
The files are unblocked single when it spends a time or when is reinitiated
the FTP service.
Why ca... more >>
UrlScan and IISLockdown
Posted by A.M at 2/11/2004 2:31:31 PM
Hi,
Do we still need to use UrlScan and IIDLockDown on IIS6.0
I am asking this because i heared about security improvement on IIS6.0 and
those tools has been developed during IIS 5 time.
Thanks,
Ali
... more >>
iis 6 question about accessing url on it
Posted by zoomer at 2/11/2004 2:13:38 PM
I have a new site I created, I can access just fine at
http://localhost
I can also go to another machine on my lan and type
http://servername
however, if I type
http://FQDN (the AD FDQN for this server on the lan)
I get prompted with a login box, weird huh? I don't understand what the
differ... more >>
Can a SSL certificate be transfered?
Posted by The Pistoleer at 2/11/2004 12:27:46 PM
Can a SSL certificate be transfered from one IIS6 server to another IIS6
server (different IP, and different zipcode, but same domain)? Or will I
need to purchase another certificate?
Pete
http://www.Pistoleer.com - Retail & Wholesale (PH/FX 618-288-4588)
____________________________________... more >>
SSL Certificate management
Posted by RRJ360 NO[at]SPAM YAHOO.COM at 2/11/2004 8:58:10 AM
I recently installed a Verisign certificate into my website using the
IIS 6 MMC. I created a Enterprise Root CA on the domain server and a
Subordinate Root CA on the web server to manage certificates. The
certificate does not show in either CA. What step have I missed?... more >>
Using existing SSL certificate in new server
Posted by John at 2/11/2004 6:42:06 AM
Hi,
I have not done this before of using an existing
certificate in the new server. We have a new production
machine which needs to have SSL enabled. There is already
an existing SSL certificate on the old production server.
I need to get this certificate to be installed on the new
serv... more >>
Basic authentication help needed
Posted by cal at 2/11/2004 3:21:41 AM
Can someone direct me to directions to set up basic win
authentication on a webpage running IIS 6?
We want to make it so that when users go to a site, they
get prompted for their windows username and password
before they can see the page.
We set something up but I think we did it wrong ... more >>
Microsoft Securith Notification Service
Posted by Hermiz Bado at 2/11/2004 1:52:56 AM
Hi,I tried to download "Microsoft Security Notification
Service" from MS Website.But I got an Error message & was
directed to contact MS product support,which I couldn't.
I have Windows 98SE and use Internet Explorer 6 SP1.
Is there a way to download the above mentioned Service or
... more >>
HTTP to HTTPS in IIS
Posted by Yake at 2/11/2004 12:21:07 AM
Hell
I having a dilemma about the security on a page that I have developed. My problem is that I'm not sure if a page in http that sends a post form to HTTPS is secure?
Is the post data secured before the HTTP post request is send to the HTTPS page
thanks
regards
yake... more >>
NT4 support IAS?
Posted by Brian O'Halloran at 2/10/2004 9:44:22 PM
Does anyone know if NT4 suports IAS (Internet
Authentication Service)?
Or, does one have to upgrade NT4 to Win 2000?
Thanks,
Brian... more >>
Forms Authentication for subdirectories of an app
Posted by Grant Harmeyer at 2/10/2004 6:35:03 PM
I would like to have a directory that is Forms authenticated so that all
ASP.NET resources contained within the directory require a logged on user.
Per spec, I have to accomplish this through the use of the <location />
element in the web.config file. I have written the code that authenticates
t... more >>
HOTMAIL
Posted by NEA at 2/10/2004 5:57:57 PM
I CANNOT ACCESS MY HOTMAIL ACCOUNT OR ANY SECURE
WEBSITES. I CHECKED MY SECURITY SETTINGS AND EVERYTHING
COMES UP FINE. WHAT AM I DOING WRONG... more >>
win95 authenticated on IIS 5.0
Posted by Guy Painchaud at 2/10/2004 5:43:10 PM
DEsktops NT4, W2k and XP don't have any problems to authenticate on a web
serveur w2k sp3.
But a Win95 give a error when authenticating. the win95 has IE5 and receive
the logon Windows but give an unsolved dns error.
notes:
SSL is not in use
The IIS use the basic authentication method.
... more >>
IIS 5 - Timeout Setting questions and problem
Posted by Michael at 2/10/2004 4:11:33 PM
I have a question about 2 setting in the Internet Services Manager for IIS
5.
In the properties on the default website, on the WebSite tab. There is a
section called Connections with a Connection Timeout value of 900 seconds.
On the Home Directory Tab, in the Application Settings section, w... more >>
Disable trace and track verbs
Posted by Rob at 2/10/2004 3:52:00 PM
I have installed URLScan and i am still get a respond on
my web site to trace and track commands. I thought
URLScan 2.5 woul take care of it. I have the AllowVerbs
set to 1 and then the very TRACE and track are not in
that section.
Any ideas?... more >>
xyz: Obtain certificate from request
Posted by Ravi at 2/10/2004 1:51:40 PM
I have a standalone server behind a load
balancer/application switch. The server does not have a
DNS name. Users access the web-site using the ip address
of the server.
I followed the steps outlinei in article Q299525 .
In step 1.h I gave the ip address of the box as the common
name.
Proc... more >>
How do I obtain a certificate
Posted by Ravi at 2/10/2004 12:49:02 PM
I created a certificate request. My server is a standalone
server that does not have a DNS entry and is behind a
loadbalancer/application switch. Users would access the
server with a fully quallified IP address. I followed the
steps in Article Q299525 till step 1.g. For 1.h I gave the
IP a... more >>
OWA losing basic authentication domain
Posted by Ray at 2/10/2004 10:56:06 AM
I have a Windows 2000 SP4 member server with IIS and Exchange 5.5. We are publishing the Exchange VRoot with Basic Authentication turned on and our domain to authenticate selected. A few weeks ago when logging into Exchange OWA the mailbox would never load into the browser and it would just hang o... more >>
Restrict IIS Admins to only administre IIS and directories
Posted by Alex at 2/10/2004 9:54:24 AM
Hi all
I have just set up a new windows 2003 server with IIS 6.0
I want my IIS administrators to be able to administre the IIS (create new
sites and so on) but i do not want the to be able to install new programs on
the server.
So i don't want them being a member of the local administrato... more >>
Can't download files with certain extensions
Posted by Max Harris at 2/10/2004 12:46:05 AM
I'm running IIS 6.0 on Windows 2003 Server.
I've written an application that lets users upload files to a folder on the server. The upload feature works well, no matter the size or type of the file uploaded.
The problem lies in the downloading of some of the files after they're uploaded.
I'... more >>
HTTP 401.3 - Access denied by ACL on resource
Posted by purab at 2/9/2004 1:55:19 PM
i can access the webfiles using IE but when i use netscape
iam getting errors..its not even showing up default
localhost page ..its asking for username and password and
when i enter the information it sayd authorization failed
with message HTTP 401.3 - Access denied by ACL on
resource..
d... more >>
IIS 6.0 - File Not Found - Windows 2003?
Posted by abcd at 2/9/2004 1:53:38 PM
My apology if this is not the correct group to answer this
==>
My web application is written in ASP, I am testing that under IIS 6.0 and
Windows 2003 standard edition...Everything works great ! except I am geting
file not found error....
the problm is like this...my application generates ... more >>
Help!!! with a Trial SSL Cert
Posted by Mike at 2/9/2004 11:33:44 AM
I have a Trial SSL Cert from Verisign and followed the instructions to get
the cert and install the cert, but I am having trouble configuring the web
server to allow access to the site via a SSL connection.
... more >>
IWAM and IUSR
Posted by Tony Talmage at 2/9/2004 9:12:39 AM
I recently made a post on a couple Win2k newsgroups, but I believe the post
was OT and thus ignored, which I expected; hopefully this NG is better
suited for my question. Anyhow, I am trying to use ASP to add IIS accounts
to a Win2k server, and apparently, without modifications, I am required to... more >>
iis and integrated security under XP Pro
Posted by Frank at 2/9/2004 8:41:10 AM
A very basic question which I am unable to solve: I am trying to get a demo
running on an XP Pro machine. Within this demo I want to use the integrated
authentication option of IIS. I created a virtual directory and placed a
simple html file inside this directory. When I access from this file
a... more >>
download PDF file with HTTPS
Posted by Claudio Zorzin at 2/9/2004 8:06:08 AM
I'have an asp page that creates a pdf file in a folder,this page works with http
Now I have installed https on IIS5 and my browser is not able to download the pdf file, the error is "unable to find the site..."
If I choose advanced option of IE6.0 and I select "do not save crypt pages onto the dis... more >>
map network drive from asp process
Posted by Serge at 2/9/2004 5:42:07 AM
Hi,
i would map a network drive from a share on another server.
it works fine with the net use command under user login but it do not work
from an asp script or dll.
is this that i have to add the iuser_<computer_name> profile into network
computer that share it resources?
Thanks a l... more >>
Kerberos authentication under IIS 5
Posted by Andrew Howles at 2/9/2004 3:58:48 AM
Hi everybody,
I have IIS 5 running on a couple of Win 2k servers in a
Win2k ActiveDirectory domain. I've set things up for
Kerberos authentication, as per this KB article:
http://support.microsoft.com/?id=215383
Everything works fine provided I use three separate
machines, as per the ... more >>
IIS Access denied for anonymous users
Posted by Andre at 2/9/2004 1:29:46 AM
I'm hosting a site on IIS, but when I try to access it
from the internet I get a sign-in box, and then Error:
Access is Denied message. If I fill out a valid username
and password I can access the web site. But want users to
access my site without a password.
I've enabled anonymous access... more >>
IIS under SSL causes Mac problem after Win 2003 upgrade
Posted by Mike Densem at 2/8/2004 7:04:45 PM
I recently upgraded the DC to 2003. On the domain I also
have two web servers. When I finished the DC upgrade I
discovered that Mac clients can no longer submit website
forms (POST) using IE under SSL to the web servers - both
still Win 2000. Has anyone else seen or heard of this?
More info... more >>
? How to set FTP session time limits ?
Posted by TJ at 2/8/2004 3:43:06 PM
W2K3 OS w/IIS6.0 (All updates/patches)
Using the default FTP feature within
The goal is to limit FTP logon's to allow a predertimed
time, either per general session or per user.
I've been searching through the components properties to
enable a FTP session time limit, but am unable to loca... more >>
Receiving winnt\system32\cmd.exe popup
Posted by Cole at 2/8/2004 3:26:07 PM
Help!!! When I run Explorer, I get a black popup that prevents me from, temporarily, doing anything. The top of it says" winnt\system32\cmd.exe" and sometimes it tells me that I can type in "net helpmsg 2310" but I can't type it- the window disappears...HELP!!!... more >>
|