How do you set the header and banner information returned by IIS 6's services (FTP, HTTP, SMTP, etc.) ??? I ran an external Security Audit scanner and it was able to tell in internal host name and IP address as well as more. TIA ...more >>

Platform (both servers are configured as below) Windows 2000 Server/IIS5 Service Pack 4 Verisign 128 bit Premium SSL ID After installing MS04-11 and -12 I began getting schannel errors in event viewer. I installed both patches at teh same time so I'm not sure which may be the culprit. I ha...more >>

Hi, This is a new webserver (Windows 2000 with IIS 5.0). This server is inside the DMZ zone, and it has still not gone live. We have two firewalls 1. The corporate and 2.The DMZ firewall. But, we see strange IP Addresses being recorded on the webserver log files. When we do a tracerout...more >>

Can students who are logged into a domain publish a FrontPage web to c:\localhost without being set up as an administrator on the local machine? If so, specifically how can this be set up?...more >>

If I want to grant someone access to a website via the IIS snap in do I have to make the user an administrator? I would like a certain user to have the ability to modify pages on the website just like the admin can. Thanks, JD ...more >>

On april 16th while reading my e-mail I got an update bulletin from Microsoft. I started the download in the backround while reading my mail. When I went to log off I received no message saying to install downloadds like I ussually do. After I logged out I tried to log back into my IS...more >>

Can anyone help fix this problem with my win 98 computer ? EXPLORER caused an invalid page fault in module KERNEL32.DLL at 0177:bff7a115. Registers: EAX=0232c6a8 CS=0177 EIP=bff7a115 EFLGS=00010212 EBX=0241ff84 SS=017f ESP=043bc6d4 EBP=043bc714 ECX=00100000 DS=017f ESI=0232c6a8 FS=6237 EDX=...more >>

Help?? Newbie.... Set-up IIS to run on XP machine. I have set-up local, remote & test site on computer. Using ASP & access. Everytime I update an asp page and put it to the remote server, I have to restart IIS. Is there a security setting or something that needs to be adjusted? ...more >>

I'm really hoping that someone can point me in the right direction. I have a (remote) dedicated webserver which I lease. It is running Window 2000 Server. Everything used to work perfect until my server hosting company decided to begin charging outrageous DNS hosting fees. When this occured, ...more >>

We have an online root CA and two online subordinate CA's. These are not enterprise CA's. Two of the CA's are standalone servers and one is a domain member server. Issued certificates will be used for data encryption. A COM object is used to request certificates on behalf of our users (CAPI and ...more >>

We have a SQL application with an IIS 5 front end. We use Windows Authentication in IIS to authenticate users. Our application is on a machine that is it's own domain, but trusts the domain in our office. We have recently added users from another office who will be accessing our system via th...more >>

At my school we automatically create Windows 2k accounts for each student and set the "require user to change password on next login" option. The problem I have is that we have a student intranet that students need to access. It is protected with basic authentication. If a student tries to acc...more >>

PROBLEM 1 I am trying to “Configure Anonymous Authentication in IIS” for a web site where I would like to use ASP.Net forms-based authentication. While the “Anonymous User Account” dialog is displayed, and I set the “Allow IIS to control password” checkbox, I get the following message...more >>

each time i set my homepage to the a certain page and click apply, and when i open my internet explorer again, the homepage will automatically change to some nuisance page. can i know how to solve this problem? and also, whenever i want to close my ie window, it seems that i cant close it n...more >>

I have made an simple test application in VB.NET which I can't run under IIS6 but under IIS5.1 it doesn't have any problem I think that the problem is something with security in IIS6 and/or Win2003 Server I tried to let IIS run under the administrator account, this gave the same error as the norm...more >>

I may found a new security hole in IIS. Some of my=20 websites stopped responding on http, I checked the logs=20 and found this: SEARCH /AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA...more >>

What is the deal with all these pop-ups saying that spy ware has been detected on your computer, is it ligit?...more >>

I have developed a simple ASP search facility which uses the Indexing Service. The page works on my machine, but when I moved it across to the live server (Win2k3/IIS6) I get this error message: HTTP Error 401.5 - Unauthorized: Authorization failed by an ISAPI/CGI application. Internet Inf...more >>

I'm researching authentication of Windows 2000 terminal services and IIS over the Internet. No VPN and no SSL in place but we do have an appropriately configured firewall. Everything works fine but I'm concerned as to whether or not I'm exposing the username and password to the public Internet. AN...more >>

Hello Roger I have created the subweb account as you have said to be the simplest. But the same problem remains anyone with FP can enter the web the usr has to be an Author to submit the file. I can't get aroung this unles you know a better way I am struggling here. https://animocracy...more >>

Hello All, I want to configure to allow a group of computers to access the a virtual directory and we are trying to grant the access to a group of computers.. According to the IIS help we should add the computer IP on which the web server is running and subnet mask. For eg if a computer ...more >>

Good day! Scenario ---------- Win2k Adv Svr + SP4 + UrlScan + NTLM only (No Anonymous allowed) Internet <--- resp/ req ---> WebSvr <--- .NET 1.1 Remoting ---> AppSvr (Remote objects in IIS) As far as I know, the first call to the remote object will failed with HTTP 401.5 before the second tr...more >>

I'm using IIS 5 on Win2000 server, using ssl for my internet site. Site name example was https://site.domainename.com. Two nic cards - 1 into the lan the other to the firewall. Site worked great from the outside. I removed one nic for a couple days from the web server (website not pub...more >>

I just started with a DSL and when I open Outlook Express and receive an email with an attachment it won't open. The error message says, "OE removed access to the following unsafe attachment in your mail". I know the attachment is safe because it was a family picture. Can someone help me? ...more >>

My Exchange 2000 server handles four different e-mail domains but only users that have one of these e-mail domains gets access to OWA. For the others they get three login attempts and then auth. failure. If i add the "working" smtp domain address to a non-working user its works just fine. I...more >>

when downloading a file from the interent the prompt message to save or open the file appears... Mine doesnt appear anymore... does anyone know how to get it back???...more >>

Hi everyone, we see the Application Server Error whenever we call an ASP page on our server lately. This happens when the application mode for the web is pooled or isolated. As I figured out by now, this should be related somehow to a security problem. What we did to solve the problem so f...more >>

I tried the above Spyware program, but did not elect to purchase it after the trial. I downloaded Search and Destroy and have run it. Now Outlook and Internet explorer cannot locate the server for internate access? Any suggestions?...more >>

Everytime I set my Internet home page to the page I would like to see come up everytime I open Internet Explorer, another page establishes itself as my home page. Ex: I will go into internet properties, type in the desired home page and hit apply. When I open Internet Explorer the first...more >>

my internet automatically posts the previous websites I have visited when I type one letter into the address field. I deleted all of my cookies and files and the history- so I did a search to find what was holoding them. I may have found it in my C drive under a file called system 32. I...more >>

help!!! someone has my password for a unsecured site and are using my phone to make calls to some place Sao Tome my phone bill is through the roof I need help to stop this ....more >>

Hello, Need some advice (please) on how to secure an upload page on my web? As I can see it the page asks for a password as it is which is my admin. account and password.But I want this to be available to others and I cannot of course give out my password. I have however added a user in...more >>

Agh please help all my work has gone!! had a power cut and when i logged on everything is gone!! there are no files, no start menu and there is only a screen saver!! i am currently using windows xp professional and need a litlle help! thnx!...more >>

I have some files on my C: drive downloaded from a number of websites and saved in a folder. I have tried to delete them, and I get the message "Access denied. Source file may be in use" I have tried the Command Prompt using rd /s/q, and still it does not work - I am told I do not have a...more >>

can someone tell me what contiguous files are??? and if they can be removed ???? and if so how to remove them ?????...more >>

Well, I installed IIS a looong time ago, but am now just getting involved. When I try to access http://localhost, it asks for username and password. I spose you could guess I have no idea what they were.... Any ideas on workaround? I have tried removing IIS thru Control panel-Add/Remove Windows com...more >>

I keep getting in-undated with Messenger service Pop ups often advertising Sex etc and it is becomming annoying. I have tried virtually everything to get rid of them. If I leave my Pc connected to the internet for any length of time these pop ups come on over the top of the main screen, pr...more >>

Classroom situation Running Windows XP on local computer in classroom Running Windows NT on school file server in building (used for saving and retrieving students files only-no applications are stored on this server-SUCCESS domain) Running Internet Information Services 5.1 on localhost com...more >>

I use ThumbsPlus to scan photos for my website. Apparently it is database driven. Here is my problem: I have Earthlink Total Access on my computer (a very large file) which I no longer use but everytime I uninstall it, I cannot use ThumbsPlus. Thumbs is looking for/using an ODBC databa...more >>

I have a internal site (intranet) on my LAN. When Internal users attempt to browse it on there IE 5.0, its displayed a message saying that the user is not authorizer to display the site, but on IIS configuration , I have set it o Anonymous authentication Why users can't gain access to the site Is...more >>

Hello, Does anyone know what permissions the IUSR account needs to open UDP and TCP sockets? I have an application that runs fine when IIS executes as me (administrator-level), but obviously I need things to be more secure than that. When I switch to the IUSR account, my application logs tell...more >>

Does the IISLockdown tool comes with URLScan or do I have to download them and install them separately?...more >>

Note: www.microsoft.com/technet/security and www.microsoft.com/security are authoritative in all matters concerning Microsoft Security Bulletins! ANY e-mail, web board or newsgroup posting (including this one) should be verified by visiting these sites for official information. Microsoft never s...more >>

Is there any known way to install IIS to somewhere other than the C drive?...more >>

Hi, I have a Win2000 server running FTP in IIS. I have the FTP set up in the Properties -> Security Accounts tab so that it does not allow Anon Connections. In FTP Site operators I have the Admins group plus a named user say ftpuser (which is a member of the Users group only) defined to allow...more >>

I have had an SSL-protected server running for quite sometime with no issues. Over the past few days, the site will stop servicing SSL requests and will respond with a "page not found" error. Port 80 requests are handled just fine. In reviewing the event logs, I have found an error that occur...more >>

logging into OWA and being prompt to change password. Internet Service Manager for IIS 6.0 gives error number -2147022675...more >>

There are some web sites that keep adding items to my registry. They cause my system to load programs from different locations and to load programs that aren't supposed to be loaded. How do I lock my registry against this kind of invasion? Thank you. Lewis ...more >>

I have been seeing a lot of conflicting information in regards to spyware. I recently downloaded Spybot Search & Destroy version 2.1 to try and get rid of a trojan horse. It seemed to have worked although I am concerned that people state that Spyware can provide 3rd parties with my interne...more >>

I have installed iisadmpwd but am not sure how to configure it so IIS redirects to one of these pages when the password needs to be changed. I would like to have this occur when using IWA with Sharepoint. The dialog opens and allows the expired password to be entered 3x and then displayes the ...more >>