Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008


all groups > iis security > april 2004 > threads for april 15 - 21, 2004

Filter by week: 1 2 3 4 5

Registry Protection (Retry the message)
Posted by Lewis Shell at 4/21/2004 8:38:54 PM
There are some web sites that keep adding items to my registry. They cause my system to load programs from different locations and to load programs that aren't supposed to be loaded. How do I lock my registry against this kind of invasion? Thank you. Lewis ...more >>

Spyware and Adware
Posted by J Mitchell at 4/21/2004 12:25:11 PM
I have been seeing a lot of conflicting information in regards to spyware. I recently downloaded Spybot Search & Destroy version 2.1 to try and get rid of a trojan horse. It seemed to have worked although I am concerned that people state that Spyware can provide 3rd parties with my interne...more >>

Change Password
Posted by Mark Pfeifer at 4/21/2004 10:11:38 AM
I have installed iisadmpwd but am not sure how to configure it so IIS redirects to one of these pages when the password needs to be changed. I would like to have this occur when using IWA with Sharepoint. The dialog opens and allows the expired password to be entered 3x and then displayes the ...more >>

windows integrated authentication
Posted by Shaju at 4/21/2004 10:01:30 AM
I have an online server running on windows 2003. In that machine i had given windows integrated authentication for iis. The problem is that, when i tried http://servername/web/default.aspx, it will ask five or six times for username , password and domain name. And for each links its again askin...more >>

ACCESS DENIED NT AUTHORITY\NETWORK SERVICE
Posted by Malcolm at 4/21/2004 9:15:58 AM
Sorry for the double posting but just realised there's a specific news group for IIS Security issues.. ---------- I've recently upgraded from 2000 Server to 2003 Server and I'm trying to track down why one particular application is not working fully. It is not displaying one particular w...more >>

Exchange 2000 IIS authentication settings
Posted by Peter at 4/21/2004 8:38:05 AM
Configuring Exchange 2000 OWA/Windows 2000 IIS i can do a lot of configurations. Regarding Authentication I can set the "Anonymous", "Basic" and "Integrated" security option on both the "Default Web Site" and the "Exchange site". Having exchange on the same server as the IIS and the DCs on othe...more >>

Exchange 2000 and Software Update Services SUS
Posted by Tanya P at 4/21/2004 7:40:50 AM
Hello all, I have an Exchange 2000 server and IIS 5 running on a Windows 2000 standard server. Windows server is configured as a Domain controller also with service pack 4. I would like to install windows Software Update Services (SUS) on my domain controller. Since my remote users ac...more >>

Integrated Windows Authentication - Does not work on Virtual websites
Posted by John at 4/21/2004 6:58:01 AM
Hi, Please, kindly let me know that there has been no answer for my posting for a long time. I have another site created in the webserver [Win2k and IIS 5.0]. A folder within this site needs to be password protected and it should use Windows Authentication. I have disabled Basic Authent...more >>



IIS 6.0 bocking web site access for domain users
Posted by Guest at 4/21/2004 3:51:42 AM
Is there any way we can block a group of domain users from acessgin a web site ? I tried the Grant & deny access option for blocking domain group but it doen not work ... ...more >>

certserv pages not found
Posted by Lucian at 4/20/2004 10:47:51 PM
Hi all, I'm trying to create a certificate on my windows 2003 server. I did it once and I am redoing my certificate. http://servername/certserv an error 404, page not found. I uninstall cert services and reinstalled. Created a new cert request, but still can't get my certserv web page...more >>

settting up web page with FTP capabilities
Posted by Bob K. at 4/20/2004 9:00:42 PM
Hi, I'm trying to create a web page or something like it that will have the ability to let a user login and upload photo images in bulk. This will be used when I travel to upload photos from my digital camera to my home computer so I can reuse my memory card while on the road. First I tried ...more >>

Printer Folder Missing after re-installing IIS
Posted by J.R. at 4/20/2004 8:31:06 PM
My printers folder is missing after re-installing IIS. How do I fix this - I need it to connect a laptop to home printer!...more >>

SSL Redirect
Posted by Jim at 4/20/2004 8:25:35 PM
We have setup a custom error to redirect users when they try to access a site without using https. This work fine for any site that doesn't use asp.net. When you goto a site that uses asp.net you get the following error: The specified request cannot be executed from current Application Pool...more >>

.htr files
Posted by Thomas at 4/20/2004 4:39:44 PM
Hi! I have activated the IISADMPWD on IIS (W2K SP4) and the aexp.htr displays normal. When I hit the ok-button I got redirected to the achg.htr page. Here is the problem. The redirect results in an Error 404 page not found. Any ideas? No lockdown or urlscan installed so far. Thomas...more >>

SSL not listening on 443 in web
Posted by John Parks at 4/20/2004 2:51:39 PM
Issue: Migrated secure web from NT4(sp6a)/IIS5 Server to windows 2000(sp4)/IIS5 Server, exported/imported the certificate. New server will not listen on 443 if assigned to an individual web. It will listen if 443 is assigned to the root (default) server. Sniffing the connection shows normal c...more >>

Extranet Security
Posted by karaw NO[at]SPAM grouprsi.com at 4/20/2004 12:51:56 PM
Hi there, I'm looking for some assistance in setting up security for internal web servers. Currently we have a web server, Windows Server 2003 using IIS6.0, which is hosting one external site as well as four internal site. These internal sites are using Sharepoint Services and therefore will ...more >>

Permissions on ASP Compiled Templates folder
Posted by andycheung2000 NO[at]SPAM hotmail.com at 4/20/2004 8:45:55 AM
According to the following link, I need to set full control for IIS_WPG to the folder systemroot\system32\inetsrv\ASP Compiled Templates I'd like to know whether I can make do with 'modify' instead? http://support.microsoft.com/default.aspx?scid=kb;EN-US;332097 Also, is it the IWAM user whi...more >>

Cannot change thread mode after it is set
Posted by tina.ericson NO[at]SPAM nilex.se at 4/20/2004 7:00:35 AM
We run a webapplication on IIS 5.0 and it works perfect, when we tries to run it on IIS4 with sp6 it doesn´t work that perfect... we get this message: Cannot change thread mode after it is set, sometimes we get it immediately when we start the webapplication and sometimes we can run the applic...more >>

Authentication Issues
Posted by Nicodemas at 4/20/2004 2:06:04 AM
I've have turned on Integrated Windows Authentication (and only this) for my entire site I have also granted the Everyone group on my domain Read + Read & Execute + List Folder Contents on my web site's root folder However, when I type in the URL to the site, I am still prompted for a username, ...more >>

Error: Access is Denied -- Customizable?
Posted by PuddleNuts at 4/19/2004 7:10:13 PM
I have a website on a windows 2000 box running IIS5. I have all of the security set up appropriately and it is working well. My question is, can I customize the error message that reads "Error: Access is Denied". It appears in the top left corner when the login fails. It does not appear to b...more >>

Basic Authentication Login Box
Posted by rick_steu at 4/19/2004 3:36:03 PM
Hello Is there a way to use a form to pass credentials to an IIS6 site that is running on 'Basic Authentication' and authenticate the user? I do know about the http://username:password@domain.com trick, but that doesn't seem to work for new versions of IE. Is there another way? Maybe with heade...more >>

SSL, IIS ------ PROBLEMS -- HELP
Posted by Shawn McCarthy at 4/19/2004 1:47:57 PM
SSL, IIS ------ PROBLEMS -- HELP I have SSL set up on my website. It works for html pages, but not aspx pages. Does anyone know why this would make a difference? Does anyone know how to fix this? Thanks, Shawn ...more >>

Error 500.100
Posted by Mats-Lennart Hansson at 4/19/2004 9:20:00 AM
Hi, I'm having a strange problem with the IIS. Sometimes, not always, I get an 500.100 error when trying to reach my web application. The flow is like this: 1. Web call to the IIS 2. The IIS creates an object which is in COM+ (server application) 3. The COM+ (server application) object creat...more >>

Server Side Includes and Integrated Authentication
Posted by Nicodemas at 4/19/2004 5:36:07 AM
Hello all I have a web page that I run on my company's local intranet. I want this page to be able to access the server variable LOGON_USER, so I turn on Integrated Authentication through my IIS MMC snap-in and turn off Anonymous Access. I added the Everyone group to the default page's NTFS pe...more >>

OWA page cannot be displayed
Posted by Lucian at 4/18/2004 9:51:26 PM
Hi all, I went through the steps for creating a certificate so I can access OWA over SSL. Strangely, I get the prompt for the certificate and when I select yes, I get page can't be displayed. I take off the 128 encrytion settings and I can get to it over http. Any help would be app...more >>

IIS Lockdown Tool Corrupted Exchange 2000
Posted by Michael Barker at 4/18/2004 1:27:44 PM
We did the IIS lockdown tool to enhance our security as recommended by Microsoft and it corrupted our entire Exchange server files, etc. After a day to recover by reloading and reconfiguring Exchange and restoring all our email from backups we are reluctant to do this again on any of our ...more >>

Strange IIS and SSL problems
Posted by Tech at 4/18/2004 7:10:56 AM
I have been having intermittent problems with SSL sites. It seems that (no matter what app platform - asp, aspx, even MIVA), when going thru screens via SSL, sometimes a 'blank' page comes up. Testing site without SSL works just fine. If I do get a blank screen, clicking refresh fixes...more >>

Load Balancing : Sticky Sessions / SSL
Posted by Team Macromedia at 4/17/2004 3:08:27 PM
OK, Onto another issue we are having. We run a LocalDirector LD-417 Load Balancer on a multiple webserver setup using Macromedia ColdFusion to serve up dynamic content. Our problem is this : ColdFusion session data (via port 80) is held in the Webserver's memory you are currently load ...more >>

IIS / SSL + Pages not Loading (HTTPS)
Posted by Team Macromedia at 4/17/2004 10:48:11 AM
Hi (sorry for the X-Post), In a bit of a hole here. I currently have a Load Balanced environment (using an ancient LocalDirector 417) currenrly over 2 Web Servers. Each Web Server has its own SSL Certificate installed for secure.mysite.com from Verisign using standard Port 443. We are us...more >>

IIS Server and SQL Server on different domains
Posted by Timo at 4/16/2004 4:30:33 PM
We've gotten IIS and SQL Server to talk using Windows Authentication when the two boxes are on the same domain for our intranet applications. Now we're looking ahead to when another IIS box will be placed outside our domain as our dotcom internet site. For that, my inclination is to fall back o...more >>

iis 6 on win 2003
Posted by luciano tolomei at 4/16/2004 9:44:07 AM
i have to install a certificate on a server in production. I can create a certificate request. but the problem is that the server is in production and it does not seem to work in https if i leave the request open, and my certification agency will send it to me in about 24 hours. so i try to...more >>

password access from outside the intranet
Posted by Martin Fenech at 4/16/2004 7:43:21 AM
Hi, I've got IIS 6 running on win2003 with one website. My problem is this: I've got some web pages in a folder which when a request is coming from the intranet than access should be given but if the request is coming from outside the intranet then a password authentication method should ...more >>

Spam
Posted by BWT at 4/16/2004 6:05:46 AM
Urgently need SPAM elimination ability. ...more >>

Help in getting the IIS SSL integration along with application server Tomcat
Posted by (john_rajendran NO[at]SPAM xiotech.com) at 4/15/2004 11:30:26 PM
Hi there, I have to setup SSL on IIS and the communication from client will be multipart post with files ranging from 1 MB to 2 MB. (all encrypted data). Then once the SSL handshake and authentication is done then Tomcat application (servlet) will be invoked by IIS to do the business logic on the r...more >>

Constantly have to restart IIS when updating files
Posted by NewbieRick at 4/15/2004 9:16:03 PM
I'm sure this is an easy fix, but I can't find the documentation Using MX2004 to update files to remote server. (ASP Every time I update the site, I have to restart the the IIS Is there some security setting that needs to be changed. Or configuration that I'm not getting?...more >>

SSL Cert install for OWA on MS cluster
Posted by gjb at 4/15/2004 5:19:46 PM
Hi, In order to use access Exchange using OWA via Exchange Virtual HTTP server on MS Cluster, what is the proper way to install the SSL cert onto both nodes. As the cert needs to have the same common name do I install on one server then export/import the same cert or request 2 certs with same...more >>

searching
Posted by tracie at 4/15/2004 1:48:52 PM
Can anyone tell me what this means. I'm trying to browse and something isn't right. Technical Information (for support personnel) Go to Microsoft Product Support Services and perform a title search for the words HTTP and 404. Open IIS Help, which is accessible in IIS Manager (inetmg...more >>

Docs/info needed for SSL on Clustered IIS5
Posted by Bobby at 4/15/2004 12:15:35 PM
I have IIS 5 on a Windows 2000 Cluster. Runs fine. I would like to install an SSL certificate that will work on either node when it is active. Can someone point me towards some documentation or provide a step-by-step? Thanks. ...more >>

FTP Problem
Posted by Michael Lavengood at 4/15/2004 9:46:09 AM
I have installed IIS on my laptop running XP Pro SP1. I am having problems connecting to the FTP Server from remote computers. I get an error message "Connection Refused". I can connect to the ftp server fine on that PC. I am not running a firewall on the pc either. Any help is appreciated. ...more >>

ms access 97 message . . .
Posted by Juan Garcia at 4/15/2004 9:43:02 AM
I am getting this message from an access 97 databese when I try to copy a table: "the microsoft jet database stopped the process because you and another user are attemping change the same data at the same time" However, nobody else has the same table open at all. Could you pl...more >>

SSL port number disappear
Posted by Lhajwurie at 4/15/2004 8:26:05 AM
Whenever i update my machine, the SSL port number (443) disappears and I have to manually type it in Can anyone help?...more >>

2 web sites 1 with VPN
Posted by Chris at 4/15/2004 7:56:01 AM
I am trying to run 2 websites on my iis (win2000)1 for internet use and other for remote workers but the remote workers site I want to run a vpn to it and authentication for the users.Is it possible.(running through firewall on DMZ)Thanks...more >>

Error 401.3 ACL
Posted by Stewart Shram at 4/15/2004 7:36:16 AM
Running windows 2003 server as a domain controller. I am trying to upload a document in to the documents library, however this then asks me for a password, I am down as an administrator/webmaster but still keep getting this message You are not authorized to view this page You do not have pe...more >>

iis server sends asp response before it finishes processing
Posted by o_nazmy NO[at]SPAM yahoo.com at 4/15/2004 6:50:12 AM
hi, i got a web application that uses asp,iis,windows 2000 server. i got a page that exports a file using crystal reports 9,which takes long time to export the file,about 7 minutes,the application should wait till the file is exported to display a link to the file. the problem as it seems is th...more >>

urgent please help.
Posted by m at 4/15/2004 5:19:24 AM
Hello, The webpage just stop working because the IUSR_username account is not belong to the administrators group. But this shouldn't happend because this IUSR_username is never belong to the administrators group before. And now somehow all the sudden the IUSR_username account have t...more >>


DevelopmentNow Blog