Groups | Blog | Home


Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > iis security > april 2004 > threads for april 1 - 7, 2004

Filter by week: 1 2 3 4 5

About WCAT
Posted by HaiNa at 4/7/2004 10:21:02 PM
Where can I get the Microsoft Web Capacity Analysis Tool (WCAT) from the Internet ?...more >>


prompt for Username & password
Posted by Pravin Mahadeshwar at 4/7/2004 7:36:03 PM
Hi , I have a webserver which has IIS installed on it, I have a website running on this server. So from my client's box from the Internet Explorer when I try to bring up the website I am able to get to that website successfully with out entering username and password My requirement is when...more >>

right clicking while in broswer
Posted by anonymous NO[at]SPAM discussions.microsoft.com at 4/7/2004 3:56:20 PM
When I right click while in my internet browser, there have been new links added to my right click list that I want to remove. How do I do this???...more >>

Want login from outside, but not from inside?????
Posted by Kevin at 4/7/2004 12:21:28 PM
I have a reporting website that is accesible from inside my network and from outside via the internet. I need to require a login when accessing from the internet, but I would like for the users network login to be used if accessing from the local LAN. Currently I get a login prompt from the in...more >>

isolating web server
Posted by HernĂ¡n Castelo at 4/7/2004 9:56:49 AM
Hi i read microsoft.com that "web servers do not require netbios or smb" (sic) then MS recomends to disable smb by this way: 1) "Clear the Client Microsoft Networks box" 2) "Clear the File and Printer Sharing for Microsoft Networks box" this confused to me, if i do that, webserver can...more >>

IIS certificate wizard won't allow "Create New" option!
Posted by Stephen at 4/7/2004 8:55:15 AM
We have an existing SSL-enabled IIS web site with an existing SSL certificate. We need to create a *new* SSL certificate request for this site because the OU has changed and our SSL provider is changing and they require a new certificate request to get a discount, blah blah blah.... So...more >>

by-pass anonymous login popup
Posted by Sharon at 4/7/2004 8:11:11 AM
I need a way to bypass the login box for an in-house web site. It's just an anonymous login to access publicly viewed reports, and the users should not have to enter the id. Since Internet Explorer prevents puting the userID in the url, I'm trying to use the workaround listed in Microsoft Secur...more >>

activeX component security
Posted by Jase at 4/7/2004 12:02:56 AM
Hi, I have developed a script for use within our windows2000 intranet environment that uses ActiveX. However it won't work unless the browser security settings (IE6) are enabled for "Initialise and script ActiveX controls not marked as safe". This script will be used by any users that go o...more >>



Recommended security in hosting environment
Posted by cobba at 4/6/2004 11:58:00 PM
Hi I was just wondering if anyone had any recommendations on the securit for a hosting environment? eg if you had a databases folder, lo folder, www folder, what sort of permissions would you put in there? Also, how would you configure IIS whether the sites were IP base hosting, or name ...more >>

supervisor pasword for content advisor
Posted by Darlena at 4/5/2004 6:41:14 PM
I don't have the password on this computer, I bought it used and can't get on the internet...more >>

IIS Lock Down
Posted by _M_ at 4/5/2004 4:20:02 PM
Is there an IIS Lock Down tool for IIS 6.0 ??? or is it unneeded in 6.0 ??? TIA ...more >>

DAVID help! Adding a self generated certificate to a web browser.
Posted by Allen at 4/5/2004 3:16:05 PM
I'm having problems trying to get browsers to accept a self generated certificate. I generate the certficate and create it for the url of the web server, example.web.com. When IE prompts the user, I install the certificate. I've tried the default and directing it into the Trusted CA Certs. It wi...more >>

Using "passthrough" authentication with exchange 2000 web access?
Posted by Peter at 4/5/2004 1:39:38 PM
Group, every time i start http://server\exchange i got OS login credentials even if i´m logged on with the right server in the OS. How can I get around this? The webserver is on the same server as the Exchange and i got this "error" both from the local server and from other clients These...more >>

IIS5/.NET1.0: No Authentication
Posted by Axel Dahmen at 4/5/2004 12:55:42 PM
Hi, this is strange: To test the cause why I can't debug in ASP.NET, I've switched off "Anonymous login" on my webserver. If I now enter the root of my web into IE (http://develop/), IIS doesn't respond! Sometimes I get a login window, but after entering some valid login, nothing happens, exc...more >>

Subdomain on different machine
Posted by Con at 4/5/2004 12:44:51 PM
I have setup a IIS with the primary domain on server A with subdomains as "a share located on another computer", on the subdomains I have setup security via ntfs on all subdomains, no user can connect to the subdomains as the they do not validate. I have tried logging in using admin accounts but ...more >>

homepage takeover
Posted by Gand at 4/5/2004 10:07:42 AM
My web homepage has been taken over and I can not seem to figure out how to change it back, I already tryed the reset homepage and that only brings me to the page that took over HELP...more >>

FTP weakness in IIS
Posted by toya at 4/5/2004 7:05:09 AM
I was wondering if somoeone could describe the "weakness " in the FT Server in IIS 6.0, and how to reduse, or elimante the"weakness - toy ----------------------------------------------------------------------- Posted via http://www.webservertalk.co -----------------------------------------...more >>

Upg to IIS 6 locked down my webs
Posted by Chris at 4/4/2004 2:08:24 PM
Old config: W2K, IIS 5.0, 3 web pages set to anon access. New config: W2K3, IIS 6.0, 3 web pages set to anon access. However, all 3 web pages are asking for authentication and, when I don't provide it, it gives me a 401.1. I've hit all the articles on this that I can find, IP's are set t...more >>

News Rules
Posted by Janet at 4/3/2004 5:29:36 PM
I created a News rule for blocking number 7 rule: If the message contains people or email addresses not in my address book. Delete from server. This isn't happening, I have three in my inbox at the moment and am not opening. Usually these have words or phrases in them that I do not w...more >>

iis One logon to multiple servers
Posted by John at 4/3/2004 2:50:11 PM
KB 281408 is gone - How to impliment one logon to multiple iis servers? Anyone Know?...more >>

Sharepoint team services
Posted by Virale Patel at 4/3/2004 2:00:40 PM
Im currently using MS Frontpage on Windows XP Pro. Im am using IIS as a local server, whenever I try to configure SharePoint Team Services, the computer prompts me saying the sharepoint must be hosted on a web that supports sharepoint services, ive tried to point to the root of ISS, witho...more >>

Getting default of https:// instead of http://
Posted by David at 4/3/2004 9:51:05 AM
I am using SSL on the root of my web site. How can I force IIS to use "https://www.mysite.com" instead of the default "http://www.mysite.com" when someone types in "www.mysite.com Thanks in advance David Johnson...more >>

IIS security or cooking problem with form
Posted by Career Metasearch at 4/3/2004 6:55:26 AM
On my web page I have a form that I have created and it requires a username and password. I was having a problem logging in but I went into iis and enabled the cookies and that fixed the problem. Now when I log in and try to perform another action like posting a job it kicks me back out ...more >>

can't open file
Posted by sally at 4/3/2004 4:56:41 AM
outlook express blocked an attachment on my email that i need to open...please help..i know this is a security feature...but it is very important i open this...more >>

Server object error 'ASP 0178 : 80070005'
Posted by Fredrik Nilsson at 4/3/2004 1:01:39 AM
Get this Server object error 'ASP 0178 : 80070005' Server.CreateObject Access Error /SendZipFiles.asp, line 40 The call to Server.CreateObject failed while checking permissions. Access is denied to this object. on my win2003 iis6 asp page when component is registered in COM+ service. How ...more >>

Setting up a subfolder for ssl
Posted by dp at 4/2/2004 11:06:05 AM
I have added an SSL certificate to IIS 5 to use on a subfolder of wwwroot requiring security. When I set "128 bit required" on the folder, users get "the page must be viewed over a secure channel". Where do I setup IIS to use https:// vs. http:// for this sub-folder? ...more >>

Prevent image hijack (hotlinking)
Posted by John Kenickney at 4/2/2004 9:12:00 AM
Is there a way to prevent people from hotlinking your images? On unix servers this is done whith .htaccess, is there something similar on windows based servers? I need something that doesn't have to be installed on the server because I just rent a commercial co located server. ...more >>

Strange IIS Server behavior
Posted by sunilj20 NO[at]SPAM msn.com at 4/2/2004 4:47:26 AM
Hi all... We have recently encountered a problem in a site. We have a local user "iisuser" which is used to log into the server. I that the site was installed under this user (which I don't know). The problem is that since past few days the users are unable to access the site when the server ...more >>

Basic and Windows authentication in IIS
Posted by Dennis at 4/1/2004 11:56:04 PM
I have an ASP.NET application that uses IIS windows authentication. We wish to extend this application to parteners who are not logged into the domain (and thus can not use windows authentication). Thus we have sent up a VPN connection into the application domain. We have a defined windows user o...more >>

Check security IIS 5
Posted by taja at 4/1/2004 10:57:49 PM
Hi, Are their any tools available to check if your IIS 5 server is completly bullet proof ? I want to check from outside if all exploits are closed by the right SP Thx, ...more >>

IIS6: OpenProcess Access Denied in w3wp.exe
Posted by karthik NO[at]SPAM peakstone.com at 4/1/2004 5:53:48 PM
I am trying to call OpenProcess() from the ISAPI filter running as Network Service inside w3wp.exe to check the status of a process running on the system as "LocalSystem" User, but my call fails with error 5 viz Access is Denied. But if I run w3wp.exe as "LocalSystem" User it succeeds. Any cl...more >>

about inetinfo.exe
Posted by Rodolfo at 4/1/2004 5:26:22 PM
I have several instances of inetinfo running in my PC (and also from svchost). How do we know who "called" that process? Or whom is it sending information to? I just want to know if there is some spyware or some unwanted stuff. Thanks Rodolfo...more >>

Windows 2003 IIS authentication problem
Posted by Greg at 4/1/2004 3:23:16 PM
I'm having a problem with Basic Authentication. I have a local folder that is set for only Basic Authentication. I'm logged into the system as Administrator. When I attempt to view it through IE 6 I'm asked for a username and password. I supply it with Administrator (no password since none i...more >>

access denied
Posted by Steve at 4/1/2004 2:56:43 PM
I am running windows 2000 server, sp4 and IIS 5.0. I have several webs...They are all password protected using integrated windows security. If I open a web in IE and get prompted for the password, then cancel, all of the webs display the access is denied standard error. Except one, all it...more >>

auto authenticate
Posted by Anton at 4/1/2004 11:21:47 AM
I am running 2000 server, sp4, IIS 5 I need to be able to autoexecute an asp page from a batch file that is placed in the windows scheduler. I can execute the page fine, but I can't get past the authentication. How do I pass the username and password to windows via the URL automatically ...more >>

Getting Rid of Automatic Favorites and Homepage
Posted by Treyd72 at 4/1/2004 2:46:29 AM
Hi, Recently I happened upon some page that has added 20 or 30 links to my Favorites List. I have went in and deleted, but they always come back. The same goes for my homepage, no matter how many times I change my homepage, it goes right back to some porn homepage. Can someone please ...more >>

Can't export reports to pdf into IIS folders
Posted by carlos.cruz NO[at]SPAM algeco.pt at 4/1/2004 1:40:07 AM
Hi, I'm starting to develop an ASP.NET application and I've a problem. I manage to export my report into a PDF file on every folder at the Server except inside my IIS folders. (ex: a projects sub-folder). I think this must be a security issue. Could anyone help me how to configure my IIS to...more >>

Can not add operator
Posted by Randall at 4/1/2004 12:47:40 AM
Windows 2000 Server - SP4 - all hotfixes installed. In the mmc for IIS 5, I try to add a user or group to the operators list for a web or ftp site and the user/group doesn't appear in the operators list. All other security functions work fine (file, folder, registry, share etc) Has anyone ru...more >>


DevelopmentNow Blog