all groups > iis security > april 2004 > threads for april 15 - 21, 2004
Filter by week: 1 2 3 4 5
Registry Protection (Retry the message)
Posted by Lewis Shell at 4/21/2004 8:38:54 PM
There are some web sites that keep adding items to my
registry. They cause my system to load programs from
different locations and to load programs that aren't
supposed to be loaded.
How do I lock my registry against this kind of invasion?
Thank you. Lewis
... more >>
Spyware and Adware
Posted by J Mitchell at 4/21/2004 12:25:11 PM
I have been seeing a lot of conflicting information in
regards to spyware. I recently downloaded Spybot Search &
Destroy version 2.1 to try and get rid of a trojan horse.
It seemed to have worked although I am concerned that
people state that Spyware can provide 3rd parties with my
interne... more >>
Change Password
Posted by Mark Pfeifer at 4/21/2004 10:11:38 AM
I have installed iisadmpwd but am not sure how to configure it so IIS
redirects to one of these pages when the password needs to be changed. I
would like to have this occur when using IWA with Sharepoint. The dialog
opens and allows the expired password to be entered 3x and then displayes
the ... more >>
windows integrated authentication
Posted by Shaju at 4/21/2004 10:01:30 AM
I have an online server running on windows 2003. In that machine i had given
windows integrated authentication for iis. The problem is that, when i tried
http://servername/web/default.aspx, it will ask five or six times for
username , password and domain name. And for each links its again askin... more >>
ACCESS DENIED NT AUTHORITY\NETWORK SERVICE
Posted by Malcolm at 4/21/2004 9:15:58 AM
Sorry for the double posting but just realised there's a specific news group for IIS
Security issues..
----------
I've recently upgraded from 2000 Server to 2003 Server and
I'm trying to track down why one particular application is
not working fully. It is not displaying one particular
w... more >>
Exchange 2000 IIS authentication settings
Posted by Peter at 4/21/2004 8:38:05 AM
Configuring Exchange 2000 OWA/Windows 2000 IIS i can do a lot of
configurations.
Regarding Authentication I can set the "Anonymous", "Basic" and "Integrated"
security option on both the "Default Web Site" and the "Exchange site".
Having exchange on the same server as the IIS and the DCs on othe... more >>
Exchange 2000 and Software Update Services SUS
Posted by Tanya P at 4/21/2004 7:40:50 AM
Hello all,
I have an Exchange 2000 server and IIS 5 running on a
Windows 2000 standard server. Windows server is configured
as a Domain controller also with service pack 4.
I would like to install windows Software Update Services
(SUS) on my domain controller.
Since my remote users ac... more >>
Integrated Windows Authentication - Does not work on Virtual websites
Posted by John at 4/21/2004 6:58:01 AM
Hi,
Please, kindly let me know that there has been no answer
for my posting for a long time. I have another site
created in the webserver [Win2k and IIS 5.0]. A folder
within this site needs to be password protected and it
should use Windows Authentication. I have disabled Basic
Authent... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
IIS 6.0 bocking web site access for domain users
Posted by Guest at 4/21/2004 3:51:42 AM
Is there any way we can block a group of domain users from
acessgin a web site ? I tried the Grant & deny access
option for blocking domain group but it doen not work ... ... more >>
certserv pages not found
Posted by Lucian at 4/20/2004 10:47:51 PM
Hi all,
I'm trying to create a certificate on my windows 2003
server. I did it once and I am redoing my certificate.
http://servername/certserv an error 404, page not found.
I uninstall cert services and reinstalled. Created a new
cert request, but still can't get my certserv web page... more >>
settting up web page with FTP capabilities
Posted by Bob K. at 4/20/2004 9:00:42 PM
Hi,
I'm trying to create a web page or something like it that will have the
ability to let a user login and upload photo images in bulk. This will be
used when I travel to upload photos from my digital camera to my home
computer so I can reuse my memory card while on the road. First I tried
... more >>
Printer Folder Missing after re-installing IIS
Posted by J.R. at 4/20/2004 8:31:06 PM
My printers folder is missing after re-installing IIS. How do I fix this - I need it to connect a laptop to home printer!... more >>
SSL Redirect
Posted by Jim at 4/20/2004 8:25:35 PM
We have setup a custom error to redirect users when they try to access a
site without using https. This work fine for any site that doesn't use
asp.net. When you goto a site that uses asp.net you get the following
error:
The specified request cannot be executed from current Application Pool... more >>
.htr files
Posted by Thomas at 4/20/2004 4:39:44 PM
Hi!
I have activated the IISADMPWD on IIS (W2K SP4) and the aexp.htr
displays normal.
When I hit the ok-button I got redirected to the achg.htr page.
Here is the problem. The redirect results in an Error 404 page not found.
Any ideas?
No lockdown or urlscan installed so far.
Thomas... more >>
SSL not listening on 443 in web
Posted by John Parks at 4/20/2004 2:51:39 PM
Issue: Migrated secure web from NT4(sp6a)/IIS5 Server to windows
2000(sp4)/IIS5 Server, exported/imported the certificate. New server will
not listen on 443 if assigned to an individual web. It will listen if 443 is
assigned to the root (default) server.
Sniffing the connection shows normal c... more >>
Extranet Security
Posted by karaw NO[at]SPAM grouprsi.com at 4/20/2004 12:51:56 PM
Hi there,
I'm looking for some assistance in setting up security for internal
web servers. Currently we have a web server, Windows Server 2003 using
IIS6.0, which is hosting one external site as well as four internal
site. These internal sites are using Sharepoint Services and therefore
will ... more >>
Permissions on ASP Compiled Templates folder
Posted by andycheung2000 NO[at]SPAM hotmail.com at 4/20/2004 8:45:55 AM
According to the following link, I need to set full control for
IIS_WPG to the folder systemroot\system32\inetsrv\ASP Compiled
Templates
I'd like to know whether I can make do with 'modify' instead?
http://support.microsoft.com/default.aspx?scid=kb;EN-US;332097
Also, is it the IWAM user whi... more >>
Cannot change thread mode after it is set
Posted by tina.ericson NO[at]SPAM nilex.se at 4/20/2004 7:00:35 AM
We run a webapplication on IIS 5.0 and it works perfect,
when we tries to run it on IIS4 with sp6 it doesn´t work that
perfect...
we get this message: Cannot change thread mode after it is set,
sometimes we get it immediately when we start the webapplication and
sometimes we can run the applic... more >>
Authentication Issues
Posted by Nicodemas at 4/20/2004 2:06:04 AM
I've have turned on Integrated Windows Authentication (and only this) for my entire site
I have also granted the Everyone group on my domain Read + Read & Execute + List Folder Contents on my web site's root folder
However, when I type in the URL to the site, I am still prompted for a username, ... more >>
Error: Access is Denied -- Customizable?
Posted by PuddleNuts at 4/19/2004 7:10:13 PM
I have a website on a windows 2000 box running IIS5. I have all of the
security set up appropriately and it is working well. My question is,
can I customize the error message that reads "Error: Access is Denied".
It appears in the top left corner when the login fails. It does not
appear to b... more >>
Basic Authentication Login Box
Posted by rick_steu at 4/19/2004 3:36:03 PM
Hello
Is there a way to use a form to pass credentials to an IIS6 site that is running on 'Basic Authentication' and authenticate the user? I do know about the http://username:password@domain.com trick, but that doesn't seem to work for new versions of IE. Is there another way? Maybe with heade... more >>
SSL, IIS ------ PROBLEMS -- HELP
Posted by Shawn McCarthy at 4/19/2004 1:47:57 PM
SSL, IIS ------ PROBLEMS -- HELP
I have SSL set up on my website. It works for html pages, but not aspx
pages. Does anyone know why this would make a difference? Does anyone know
how to fix this?
Thanks,
Shawn
... more >>
Error 500.100
Posted by Mats-Lennart Hansson at 4/19/2004 9:20:00 AM
Hi,
I'm having a strange problem with the IIS. Sometimes, not always, I get an
500.100 error when trying to reach my web application. The flow is like
this:
1. Web call to the IIS
2. The IIS creates an object which is in COM+ (server application)
3. The COM+ (server application) object creat... more >>
Server Side Includes and Integrated Authentication
Posted by Nicodemas at 4/19/2004 5:36:07 AM
Hello all
I have a web page that I run on my company's local intranet. I want this page to be able to access the server variable LOGON_USER, so I turn on Integrated Authentication through my IIS MMC snap-in and turn off Anonymous Access.
I added the Everyone group to the default page's NTFS pe... more >>
OWA page cannot be displayed
Posted by Lucian at 4/18/2004 9:51:26 PM
Hi all,
I went through the steps for creating a certificate so I
can access OWA over SSL. Strangely, I get the prompt for
the certificate and when I select yes, I get page can't
be displayed.
I take off the 128 encrytion settings and I can get to it
over http.
Any help would be app... more >>
IIS Lockdown Tool Corrupted Exchange 2000
Posted by Michael Barker at 4/18/2004 1:27:44 PM
We did the IIS lockdown tool to enhance our security as
recommended by Microsoft and it corrupted our entire
Exchange server files, etc. After a day to recover by
reloading and reconfiguring Exchange and restoring all our
email from backups we are reluctant to do this again on
any of our ... more >>
Strange IIS and SSL problems
Posted by Tech at 4/18/2004 7:10:56 AM
I have been having intermittent problems with SSL sites.
It seems that (no matter what app platform - asp, aspx,
even MIVA), when going thru screens via SSL, sometimes
a 'blank' page comes up.
Testing site without SSL works just fine. If I do get a
blank screen, clicking refresh fixes... more >>
Load Balancing : Sticky Sessions / SSL
Posted by Team Macromedia at 4/17/2004 3:08:27 PM
OK,
Onto another issue we are having. We run a LocalDirector LD-417 Load
Balancer on a multiple webserver setup using Macromedia ColdFusion to
serve up dynamic content. Our problem is this : ColdFusion session
data (via port 80) is held in the Webserver's memory you are currently
load ... more >>
IIS / SSL + Pages not Loading (HTTPS)
Posted by Team Macromedia at 4/17/2004 10:48:11 AM
Hi (sorry for the X-Post),
In a bit of a hole here. I currently have a Load Balanced environment
(using an ancient LocalDirector 417) currenrly over 2 Web Servers. Each
Web Server has its own SSL Certificate installed for secure.mysite.com
from Verisign using standard Port 443. We are us... more >>
IIS Server and SQL Server on different domains
Posted by Timo at 4/16/2004 4:30:33 PM
We've gotten IIS and SQL Server to talk using Windows Authentication when
the two boxes are on the same domain for our intranet applications. Now
we're looking ahead to when another IIS box will be placed outside our
domain as our dotcom internet site. For that, my inclination is to fall
back o... more >>
iis 6 on win 2003
Posted by luciano tolomei at 4/16/2004 9:44:07 AM
i have to install a certificate on a server in production.
I can create a certificate request.
but the problem is that the server is in production and it does not seem to
work in https if i leave the request open, and my certification agency will
send it to me in about 24 hours.
so i try to... more >>
password access from outside the intranet
Posted by Martin Fenech at 4/16/2004 7:43:21 AM
Hi,
I've got IIS 6 running on win2003 with one website. My
problem is this: I've got some web pages in a folder which
when a request is coming from the intranet than access
should be given but if the request is coming from outside
the intranet then a password authentication method should
... more >>
Spam
Posted by BWT at 4/16/2004 6:05:46 AM
Urgently need SPAM elimination ability. ... more >>
Help in getting the IIS SSL integration along with application server Tomcat
Posted by (john_rajendran NO[at]SPAM xiotech.com) at 4/15/2004 11:30:26 PM
Hi there,
I have to setup SSL on IIS and the communication from client will be multipart post with files ranging from 1 MB to 2 MB. (all encrypted data). Then once the SSL handshake and authentication is done then Tomcat application (servlet) will be invoked by IIS to do the business logic on the r... more >>
Constantly have to restart IIS when updating files
Posted by NewbieRick at 4/15/2004 9:16:03 PM
I'm sure this is an easy fix, but I can't find the documentation
Using MX2004 to update files to remote server. (ASP
Every time I update the site, I have to restart the the IIS
Is there some security setting that needs to be changed.
Or configuration that I'm not getting?... more >>
SSL Cert install for OWA on MS cluster
Posted by gjb at 4/15/2004 5:19:46 PM
Hi,
In order to use access Exchange using OWA via Exchange Virtual HTTP server
on MS Cluster, what is the proper way to install the SSL cert onto both
nodes. As the cert needs to have the same common name do I install on one
server then export/import the same cert or request 2 certs with same... more >>
searching
Posted by tracie at 4/15/2004 1:48:52 PM
Can anyone tell me what this means. I'm trying to browse
and something isn't right.
Technical Information (for support personnel)
Go to Microsoft Product Support Services and perform a
title search for the words HTTP and 404.
Open IIS Help, which is accessible in IIS Manager
(inetmg... more >>
Docs/info needed for SSL on Clustered IIS5
Posted by Bobby at 4/15/2004 12:15:35 PM
I have IIS 5 on a Windows 2000 Cluster. Runs fine.
I would like to install an SSL certificate that will work
on either node when it is active.
Can someone point me towards some documentation or provide
a step-by-step? Thanks.
... more >>
FTP Problem
Posted by Michael Lavengood at 4/15/2004 9:46:09 AM
I have installed IIS on my laptop running XP Pro SP1. I am having problems
connecting to the FTP Server from remote computers. I get an error message
"Connection Refused". I can connect to the ftp server fine on that PC. I
am not running a firewall on the pc either. Any help is appreciated.
... more >>
ms access 97 message . . .
Posted by Juan Garcia at 4/15/2004 9:43:02 AM
I am getting this message from an access 97 databese
when I try to copy a table:
"the microsoft jet database stopped the process because
you and another user are attemping change the same data at
the same time"
However, nobody else has the same table open at all.
Could you pl... more >>
SSL port number disappear
Posted by Lhajwurie at 4/15/2004 8:26:05 AM
Whenever i update my machine, the SSL port number (443) disappears and I have to manually type it in
Can anyone help?... more >>
2 web sites 1 with VPN
Posted by Chris at 4/15/2004 7:56:01 AM
I am trying to run 2 websites on my iis (win2000)1 for
internet use and other for remote workers but the remote
workers site I want to run a vpn to it and authentication
for the users.Is it possible.(running through firewall on
DMZ)Thanks... more >>
Error 401.3 ACL
Posted by Stewart Shram at 4/15/2004 7:36:16 AM
Running windows 2003 server as a domain controller.
I am trying to upload a document in to the documents
library, however this then asks me for a password, I am
down as an administrator/webmaster but still keep getting
this message
You are not authorized to view this page
You do not have pe... more >>
iis server sends asp response before it finishes processing
Posted by o_nazmy NO[at]SPAM yahoo.com at 4/15/2004 6:50:12 AM
hi,
i got a web application that uses asp,iis,windows 2000 server.
i got a page that exports a file using crystal reports 9,which takes
long time to export the file,about 7 minutes,the application should
wait till the file is exported to display a link to the file.
the problem as it seems is th... more >>
urgent please help.
Posted by m at 4/15/2004 5:19:24 AM
Hello,
The webpage just stop working because the IUSR_username
account is not belong to the administrators group. But
this shouldn't happend because this IUSR_username is never
belong to the administrators group before.
And now somehow all the sudden the IUSR_username account
have t... more >>
|