all groups > iis security > march 2004 > threads for march 1 - 7, 2004
Filter by week: 1 2 3 4 5
someone help me with this
Posted by Niki at 3/7/2004 2:24:52 PM
How do I competely erase a saved name is my users menu.
Like everytime I use a program that I have to sign in to
this name is there and I dont want it there. I cant
figure it out... more >>
password
Posted by angusian.richards NO[at]SPAM btinternet.com at 3/7/2004 6:26:39 AM
Hi,being a relatively ignorant person when it comes to
computers,the fact that I don,t know if am asking the
question to the right group of people in itself shows the
little I do know about computer related
factors.However ,if I don,t ask someone I won,t get
anywhere.
Fact is though I hav... more >>
Anonymous user Authentication and DNS error
Posted by Jaleel P.A at 3/7/2004 5:08:22 AM
I have the following configuration :
windows 2k with all service packs
sql 2k with all service packs
when the "Anonymous Access" option of the IIS is unchecked for one of my
virtual directory then i am getting a "PAGE CAN NOT BE DISPLAYED, DNS
ERROR" after i enter correct user name,passwo... more >>
icon explanation
Posted by tracy at 3/6/2004 6:36:13 PM
What does the symbol that is in a square with three
shapes inside (square,triangle,circle)mean. It only
appears when try to access things on a web site... more >>
email interception
Posted by mike b at 3/6/2004 5:39:30 PM
My cousin has two email accounts; one at work and one
at his law school. Both are completely unrelated and have
two different passwords.
Someone with a vendetta, and a lot of free time, has
accessed both account's, copied sesitive emails and sent
them by snail mail to his wife and... more >>
IIS 6 File Permissoins
Posted by Greg at 3/6/2004 5:09:04 PM
How can I allow .HTC files to be used from another domain? When I link to
one on my server from another domain on my server I get an "Access is denied
to http://..." error. This is part of my dynamic navigation system.
I'm using Windows 2003.
TIA
... more >>
NTLM authentication failed(code-2146893048)
Posted by wab at 3/6/2004 5:01:00 PM
I get the above error when I try to create a new project.using Interdev 6.0
and the message occurs when it wants a user name and password, but none of
my passwords work. Seemed to work OK before i installed Symantec Internet
Security!
I get another error also, "You are not authorized to perfor... more >>
java and security
Posted by evergreen at 3/6/2004 9:08:49 AM
I would appreciate any help.........This is my sad story
LOL.I have winme ops and Ie6 browser.I have a googles
tool bar Well i have downloaded java and still unable to
use the applets ....I can't open certain pictures or
cards. I just get the red X in the corner. I have gone to
tool secur... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Web site address history question
Posted by Bill at 3/6/2004 6:17:04 AM
When I now click the drop down on the Internet Expoler's
website address bar, all past typed in adresses start
with "http://ehttp.cc/?" then the normal 'www.whatever'
What does this mean? I've never seen this 'prefix' before.... more >>
IIS Server Hacked.
Posted by Nayeem at 3/6/2004 2:41:05 AM
We are running II6 and some imp sites Hosted on it and some one hacked those sites and send it some samples of those sites by email, so can anyone help us how to secure the IIS6 and trace the hacker.
Regards
... more >>
SSL for subdomain?
Posted by hohans NO[at]SPAM yahoo.com at 3/6/2004 1:01:18 AM
I have a site, say www.mysite.com with SSL cert installed. I would
like to have a subdomain, say shop.mysite.com, that can use the same
SSL cert. The subdomain physically points to a sub-directory of the
doc root of www.mysite.com. Is this possibly to be done? Is it true
that once the SSL is... more >>
SSL for subdomain?
Posted by hohans NO[at]SPAM yahoo.com at 3/6/2004 1:01:17 AM
I have a site, say www.mysite.com with SSL cert installed. I would
like to have a subdomain, say shop.mysite.com, that can use the same
SSL cert. The subdomain physically points to a sub-directory of the
doc root of www.mysite.com. Is this possibly to be done? Is it true
that once the SSL is... more >>
how do I get rid of Norton internet security from my pc?
Posted by mark turner at 3/5/2004 6:41:13 PM
I cannot remove norton internet security from my pc. When
I try it says only an account with supervisor access can
do this. I shut itself down sometime ago now, so it's
sitting and doing nothing, but won't go when I try to
remove it. I've tried everything except a syst. restore,
which I'm ... more >>
how do I alter security settings for xp?
Posted by Mark Turner at 3/5/2004 6:32:34 PM
When I'm on a web page and I want to purchase
something,when I try to pay for it it always goes
to "this page cannot be displayed". I don't know how to
get around this. I'm sure it's something in my security
settings but I'm not sure what. Can someone please help
me?... more >>
Problem for signing ActiveX
Posted by Luca Vanuzzo at 3/5/2004 5:38:33 PM
I built an ActiveX control for visualisation in a web page. When I load the
page IE give me a warning : the
control is unsafe ...
To solve this problem I created a digital certificate using .NET SDK
utilities or by a internal certification autority. I imported
the certificate in my develop PC ... more >>
spam
Posted by seenifty6 at 3/5/2004 5:23:37 PM
Can anyone help me stop spam. I have listed message rules
to delete messages containing the
words, 'viagra' 'penis' 'impotentence' 'breast' 'enlargemen
t' 'mortgage' 'drug' 'drugs' drugstore' 'pharmacy' ad
infintum.
The e-mails still get to my inbox.
Is there anyway to stop this?... more >>
IIS Integrated Security & ASP.Net ?
Posted by WJ at 3/5/2004 5:01:50 PM
I have an IIS-6 Web site written in Asp.Net and c# (code-behind) hosted by
Windows 2003 Stand alone server. The website only allows "Integrated Windows
Authentication". I need to allow my users to change their password using the
ASP.Net website if they so desire. How do I do this programatically ... more >>
IIS User Security Problem
Posted by jdck at 3/5/2004 4:16:06 PM
Hi everyone
I just created my first website using IIS 6.0 and although I seem to be able to connect to it fine it keeps asking for a user name and password before allowing access. Anonymous user login is enabled and the default accounts have been added to the permissions. Please help....Thank you... more >>
asp and AD authentication
Posted by Blake at 3/5/2004 10:19:13 AM
I have no problems authenticating via AD and an ASP page. My question is
this - is there any way to 'reverse' the process?
What I mean is the authenticated state remains as long as the browser window
is open. Is there any .asp command I can provide that will revert the
browser session back t... more >>
Problems with IIS 5.0 SMTP ( Relay bug )
Posted by Petter Dilling at 3/5/2004 3:46:06 AM
Hi
We have problems with IIS 5.0 on Windows 2000 Server SP4 ( and IIS on Windows 2003 Server) on several installations
The problem is all these installations are open to relay, using the "%" bug
If i connect to the mailserver "smtp.customerdomain.com" on port 25, and issue the following command... more >>
Installing SSL after server has been re-formatted
Posted by jean.hewitt NO[at]SPAM worthing.gov.uk at 3/5/2004 3:28:59 AM
How do install a server certificate after the server has been
reformatted - do I have to create a new certificate with the same
details or what ? The original certificate request has been deleted.... more >>
anonymous access denied
Posted by at 3/5/2004 1:23:27 AM
I removed AD from my webserver (win 2k3 small bus edition) and now my web
sites say that I am not authorized to view the page (even from the web
server itself). I check IIS (6.0) and it definitly has allow anonymous
checked, I made sure that there is no integrated security checked, I also
opene... more >>
How to automatically change from httpS to http for a specific folder??
Posted by Po-Shan Chang at 3/4/2004 8:11:09 PM
There are great instructions on the web for force HTTPS for specific folder
How to automatically change from http to https for a specific folde
http://www.iisfaq.com/default.aspx?View=A407&P=2
But, my question would be ...
Question
========
I am trying to set up a website with the followin... more >>
Password Policy Local Vs AD
Posted by Chris at 3/4/2004 6:43:03 PM
Today we had the Local Machine's IUSR_<computer name> account's password
expire. Strange thing is that the account is set up with "password never
expires" checked on the local machine, which is a member server only, not a
DC. The Default domain policy is set to expire passwords every 180 days
... more >>
security issue using automatic configuration proxy
Posted by EricG at 3/4/2004 2:11:44 PM
I have just set up a new web windows 2003 web server,
published the web and sub webs over from the old server,
have gone through and set up permissions on the root web
and all the sub webs as required. The root web has
anonymous browse while some of the sub webs have no
anonymous browse, ... more >>
Hang
Posted by William C. at 3/4/2004 1:19:43 PM
Recently one of my Windows 2000 server has a problem with the IIS.
It hangs quite often with the IIS! User can't access the URL.
I had to 'Stop' & 'Start' the "World Wide Web Publishing Service" to resolve
temporary.
What could be the caused of it???
... more >>
multiple certificates for 1 website?
Posted by Weave at 3/4/2004 10:51:35 AM
I have created a website that can service multiple clients - completely data
driven, base on the url entered, .ie
client aaa enters via aaa.site.com
client bbb enters via bbb.site.com
However - I would like to have multiple certificates applied to the site for
the secure components, one... more >>
ASP web form security / validation
Posted by Brian Madden at 3/4/2004 10:11:47 AM
Hello All,
I'm developing a website (ASP, not ASP.NET) that allows users to post
comments about articles. The ASP page displays the comments right out of the
database.
I'm worried that a rogue user might add some javascript or something to
their comment so that it executes on other users' b... more >>
Domain Security Headers
Posted by Gary W at 3/3/2004 3:34:35 PM
Hello,
Hopefully got the right group for this query.
Basically, I have just ordered a .NET domain name with oneandone.co.uk and
for whatever reason they will not allow me to update the A-Records or change
the nameservers, and I want to point the domain at my server (instead of the
hosting p... more >>
HowTo manage IIS via MMC SnapIn without admin-rights...
Posted by Peter R. at 3/3/2004 12:37:05 PM
Hi dear newsgroup,
does anyone know, how i can give my webmaster the right to administer the
iis 6.0 on my w2k3 domaincontroller without giving him admin-rights?
thanks for help,
peter
... more >>
Payment for Beta Testing
Posted by S. Shatz at 3/3/2004 12:23:56 PM
Is this for real???
-----Original Message-----
From: Alexejun, Sharon
Sent: Monday, March 01, 2004 8:27 AM
To: Kitron, Debra; Lamirand, Pat; Rizzo, Linda; Brenda
Fulton (E-mail); Carol Reeves (E-mail); Charlene Willmeng
(E-mail); Donna_C_Appel (E-mail); Jackie Forrester (E-
mail); Jill For... more >>
Secure website - explanation required.
Posted by GriffithsJ at 3/3/2004 10:13:52 AM
Dear all
I'm in need of an explanation of secure websites and authenticated
certificates. I believe that my understanding is particularly flawed....
What I understand is as follows - please comment/correct:
When one wants to set up a secure web site, one has to generate a
certificate. T... more >>
How to disable HTTP Trace Withuot using URLScan tool?
Posted by Jerry Farkas at 3/3/2004 6:37:27 AM
How can I disable HTTP Trace without using the URLScan
tool? I need to disable HTTP Trace on IIS 4 and 5 and
everytime I use that tool It messes us everything.
Thanks in Advance.... more >>
new Certifiate
Posted by todd at 3/3/2004 6:19:31 AM
I am trying to make a new certifiate for one of my web
sites(SSL). When i try, the wizard just make a txt file
and tells me to send it. Who do i send it too? On one of
the pages it asked me if i wanted to send the request
immediately or later, the only one i can pick is later.
How do i s... more >>
Nortel VPNClient
Posted by Len at 3/3/2004 5:36:33 AM
I'm trying to load the Nortel VPNClient and get a "severe
error message stating that the registry file has invalid
data. When I try to edit the Reg file with regedit it
won't let me modify or delete the sub directory in
question. How do I change the registry file?? Thanks... more >>
IIS and Virtual Directory
Posted by sanjay at 3/2/2004 4:02:02 PM
Hello -
I am trying to configure IIS to work with my app. server.
I have a ISAPI(SaISAPI.dll) in the scripts folder. When I
access the dll using http://localhost/scripts/SaISAPI.dll
I get the message that it is configured successfully, BUT
I want to configure IIS such that the scripts par... more >>
IIS 6.. cannot logon without entering Domain name
Posted by EricG at 3/2/2004 3:32:56 PM
I have 2 2003 domain controllers and one 2003 domain
member as a web server IIS6, after setting up all users
that are members of that domain need to enter the
domainname\username and their password. Is there a way of
not having to enter the domain name? or have I set
something up wrong?
... more >>
We're getting an error when going to our website
Posted by Rod at 3/2/2004 2:39:54 PM
People who try to reach our external website (which is nothing more than
"brochure-ware") are getting a "403 Forbidden" error message. Now, I know
for a fact that it was working just fine a few weeks ago. I edited the home
page using FrontPage 2003, just last Wednesday, and from that point onwa... more >>
set IIS (v6) security defaults back to IIS v5 compatibility levels
Posted by Eric at 3/2/2004 2:01:05 PM
I have been told by Veritas that a work around to load a product on Windows server 2003 is to
"Set IIS (v6) security defaults back to IIS v5 compatibility levels
I can't find were that can be done. Any ideas
than
-Eric... more >>
form based authentication --> impersonate browser --> logging in iis --> trusted connections to sql server
Posted by news.microsoft.com at 3/2/2004 1:58:28 PM
hello out there!
we came across some serious problems here - the situation:
(system: win2003 server; iis6 and/or win2000 server; iis5; asp.net & asp
applications; sql server 2000)
usually we are using windows integrated, basic authentication over a ssl
connection to impersonate a user whe... more >>
IIS 6.0 Integrated Security
Posted by Barry G Freeman at 3/2/2004 1:54:49 PM
I'm in a bind.
I have a new W2k3 server box with IIS6.
I've uploaded an ASp.NET app which works fine on my dev machine.
The virtual root is set to disable Anonymous Access and enable
Integrated Security.
NTFS perms are Everyone, Modify for the physical disk folder and
subfolders.
The ... more >>
How to downloaf PDF files from IIS 5.0 SSL
Posted by Barry at 3/2/2004 1:31:05 PM
Hi. I am public my DOCs .doc, .pdf, .ppt from my web site Windows 2000 SP4 its working good, but when apply the Certificate SSL, the clients do not open or save the documents
Can you help me, tks
Barry...... more >>
IIS 5.1 not serving asp oraspx web pages
Posted by Bob K. at 3/2/2004 1:18:56 PM
Hi,
Specs: AMD 900, 512MB, XP Pro Sp1, IIS 5.1
I'm setting up a website which will be using ASP.NET and thus .aspx pages.
I have IIS 5.1 installed and running according to services and can read html
pages served from the virtual directory created for this purpose. For some
reason unkno... more >>
Users Cannot access ASP files in secured folders.
Posted by Fox at 3/2/2004 1:12:12 PM
Hi,
Let me first say I am not a complete novice
at this, so I probably have all the common
things done. But I am not very knowledgable
and surely could have something screwed up.
The user can access HTM files in secured
folders but cannot access ASP files in that
same folder. If I remove ... more >>
VStudio.NET & IIS6 incompatible
Posted by rene___ NO[at]SPAM hotmail.com at 3/2/2004 12:30:05 PM
Hi there,
VStudio.NET uses a temparary filename like '~~1230812309183091283.tmp'
to check if the project folder of a ASP.NET project is shared in IIS.
IIS 6 (Windows Server 2003) always returns a 404.
Does any one know how to configure IIS to allow the 'tmp' extention?
I already looked... more >>
IIS6 Blocked access to some PFs
Posted by Xavier Coppin at 3/2/2004 11:11:06 AM
Hello,
We are using Exchange 2003 running on Windows 2003. We just found that IIS6
(OWA2003) denies access to Public Folders where the name ends with a period
".".
How can I change the security configuration of IIS6 to allow users to view
these public folders with Outlook Web Access ?
Th... more >>
IIS Security strange things
Posted by Alexey Smirnov at 3/1/2004 3:01:41 PM
I have intranet application based on ASP.NET on Win2000AS (Framework 1.1).
Website uses an Integrated Windows Authentication as Authentication method
in IIS and has following security configuration in the web.config
------------------------------------------
<identity impersonate="false" />
... more >>
Pop Up's
Posted by Bert at 3/1/2004 2:03:11 PM
This is my first and last windows based computer. I am in
Real Estate, and I only need something to do simple
tasks. That is pretty much impossible with this damn set
up. I HATE it!!! Anyway, I keep getting these DAMN pop
up's from Messenger. I would really like to turn that son
of a ... more >>
You are not authorized to view this page
Posted by Lori at 3/1/2004 1:06:06 PM
I have IIS 5.0 installed on the same machine as a domain controller. I have now read that this is not a good idea, but at the time I made our server a domain controller -- I was not aware of that and it seems that it would be a major pain to put it back
The server is used for our internal testing... more >>
Installed Secure Certificate Limit
Posted by SK at 3/1/2004 11:06:06 AM
Is there a limit to the amount of certificates that can be installed on a single IIS server?... more >>
REQ: How can I read FrontPage Admin/Author/Browse permissions for each subweb?
Posted by JustMe NO[at]SPAM Home at 3/1/2004 10:28:43 AM
With FrontPage, it is possible to set permissions (browse, author,
admin) in order to grant or revoke access to subwebs.
I would like to read this information (asp, vbscript or whatever) for
all subwebs so I can generate a list of it.
Setting permissions with a generated script is no probl... more >>
Transferring Local FTP users to another box
Posted by ATTBI at 3/1/2004 9:34:45 AM
We are trying to migrate our FTP to a new box. We use local accounts on the
old FTP server for security. How can we migrate those non-domain local
account, with passwords, over to the new FTP server?
... more >>
cookies
Posted by kathryn paul at 3/1/2004 8:06:04 AM
Can anyone help please? For some reason all my cookies
have been wiped and I cannot get the list back. Also not
allowing new cookies on. Haven't installed new software -
any ideas. Have checked Internet Security options, and
cookies are enabled so why wont it allow cookies?... more >>
HELP ME, Explorer taking up my screen
Posted by Ben at 3/1/2004 7:14:05 AM
Hi Internet Explorer is keeping evething i type in search
engines for easy reference, i thought it was a good idea
at first, but now its annoying me, the list is now takes
up 1/4 of my screen, how do i undo this
Many thanks
Ben... more >>
Internet Explorer Memory
Posted by Ben at 3/1/2004 7:10:27 AM
Hi, how do i stop internet explorer from keeping
eveything i type in a search engine, the list is huge now
and takes up 1/4 of my screen!
Thanks
Ben... more >>
IIS WMI provider security access via ASP.NET
Posted by Michael Porcelli at 3/1/2004 12:31:10 AM
Greetings,
I have an ASP.NET (in C#) application which manipulates the IIS metabase via
the IIS WMI provider. I am using impersonation (via
System.Security.Principal.WindowsImpersonationContext rather than
System.Management.ManagementScope) to gain authorized access to the WMI
object. For d... more >>
|