all groups > iis security > april 2004 > threads for april 1 - 7, 2004
Filter by week: 1 2 3 4 5
About WCAT
Posted by HaiNa at 4/7/2004 10:21:02 PM
Where can I get the Microsoft Web Capacity Analysis Tool (WCAT) from the Internet ?... more >>
prompt for Username & password
Posted by Pravin Mahadeshwar at 4/7/2004 7:36:03 PM
Hi ,
I have a webserver which has IIS installed on it, I have a website running on this server.
So from my client's box from the Internet Explorer when I try to bring up the website I am able to get to that website successfully with out entering username and password
My requirement is when... more >>
right clicking while in broswer
Posted by anonymous NO[at]SPAM discussions.microsoft.com at 4/7/2004 3:56:20 PM
When I right click while in my internet browser, there
have been new links added to my right click list that I
want to remove. How do I do this???... more >>
Want login from outside, but not from inside?????
Posted by Kevin at 4/7/2004 12:21:28 PM
I have a reporting website that is accesible from inside my network and from
outside via the internet. I need to require a login when accessing from the
internet, but I would like for the users network login to be used if
accessing from the local LAN.
Currently I get a login prompt from the in... more >>
isolating web server
Posted by HernĂ¡n Castelo at 4/7/2004 9:56:49 AM
Hi
i read microsoft.com
that "web servers do not require netbios or smb" (sic)
then MS recomends to disable smb by this way:
1) "Clear the Client Microsoft Networks box"
2) "Clear the File and Printer Sharing for Microsoft Networks box"
this confused to me,
if i do that, webserver can... more >>
IIS certificate wizard won't allow "Create New" option!
Posted by Stephen at 4/7/2004 8:55:15 AM
We have an existing SSL-enabled IIS web site with an
existing SSL certificate. We need to create a *new* SSL
certificate request for this site because the OU has
changed and our SSL provider is changing and they require
a new certificate request to get a discount, blah blah
blah....
So... more >>
by-pass anonymous login popup
Posted by Sharon at 4/7/2004 8:11:11 AM
I need a way to bypass the login box for an in-house web
site. It's just an anonymous login to access publicly
viewed reports, and the users should not have to enter the id.
Since Internet Explorer prevents puting the userID in the
url, I'm trying to use the workaround listed in Microsoft
Secur... more >>
activeX component security
Posted by Jase at 4/7/2004 12:02:56 AM
Hi,
I have developed a script for use within our windows2000 intranet
environment that uses ActiveX. However it won't work unless the browser
security settings (IE6) are enabled for "Initialise and script ActiveX
controls not marked as safe".
This script will be used by any users that go o... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Recommended security in hosting environment
Posted by cobba at 4/6/2004 11:58:00 PM
Hi
I was just wondering if anyone had any recommendations on the securit
for a hosting environment? eg if you had a databases folder, lo
folder, www folder, what sort of permissions would you put in there?
Also, how would you configure IIS whether the sites were IP base
hosting, or name ... more >>
supervisor pasword for content advisor
Posted by Darlena at 4/5/2004 6:41:14 PM
I don't have the password on this computer, I bought it
used and can't get on the internet... more >>
IIS Lock Down
Posted by _M_ at 4/5/2004 4:20:02 PM
Is there an IIS Lock Down tool for IIS 6.0 ??? or is it unneeded in 6.0 ???
TIA
... more >>
DAVID help! Adding a self generated certificate to a web browser.
Posted by Allen at 4/5/2004 3:16:05 PM
I'm having problems trying to get browsers to accept a self generated certificate. I generate the certficate and create it for the url of the web server, example.web.com. When IE prompts the user, I install the certificate. I've tried the default and directing it into the Trusted CA Certs. It wi... more >>
Using "passthrough" authentication with exchange 2000 web access?
Posted by Peter at 4/5/2004 1:39:38 PM
Group,
every time i start http://server\exchange i got OS login credentials even if
i´m logged on with the right server in the OS.
How can I get around this?
The webserver is on the same server as the Exchange and i got this "error"
both from the local server and from other clients
These... more >>
IIS5/.NET1.0: No Authentication
Posted by Axel Dahmen at 4/5/2004 12:55:42 PM
Hi,
this is strange: To test the cause why I can't debug in ASP.NET, I've
switched
off "Anonymous login" on my webserver. If I now enter the root of my web
into IE (http://develop/), IIS doesn't respond! Sometimes I get a login
window, but after entering some valid login, nothing happens, exc... more >>
Subdomain on different machine
Posted by Con at 4/5/2004 12:44:51 PM
I have setup a IIS with the primary domain on server A with subdomains as "a
share located on another computer", on the subdomains I have setup security
via ntfs on all subdomains, no user can connect to the subdomains as the
they do not validate. I have tried logging in using admin accounts but ... more >>
homepage takeover
Posted by Gand at 4/5/2004 10:07:42 AM
My web homepage has been taken over and I can not seem to
figure out how to change it back, I already tryed the
reset homepage and that only brings me to the page that
took over HELP... more >>
FTP weakness in IIS
Posted by toya at 4/5/2004 7:05:09 AM
I was wondering if somoeone could describe the "weakness " in the FT
Server in IIS 6.0, and how to reduse, or elimante the"weakness
-
toy
-----------------------------------------------------------------------
Posted via http://www.webservertalk.co
-----------------------------------------... more >>
Upg to IIS 6 locked down my webs
Posted by Chris at 4/4/2004 2:08:24 PM
Old config: W2K, IIS 5.0, 3 web pages set to anon access.
New config: W2K3, IIS 6.0, 3 web pages set to anon access.
However, all 3 web pages are asking for authentication
and, when I don't provide it, it gives me a 401.1. I've
hit all the articles on this that I can find, IP's are
set t... more >>
News Rules
Posted by Janet at 4/3/2004 5:29:36 PM
I created a News rule for blocking number 7 rule:
If the message contains people or email addresses not in
my address book.
Delete from server.
This isn't happening, I have three in my inbox at the
moment and am not opening. Usually these have words or
phrases in them that I do not w... more >>
iis One logon to multiple servers
Posted by John at 4/3/2004 2:50:11 PM
KB 281408 is gone - How to impliment one logon to multiple
iis servers?
Anyone Know?... more >>
Sharepoint team services
Posted by Virale Patel at 4/3/2004 2:00:40 PM
Im currently using MS Frontpage on Windows XP Pro. Im am
using IIS as a local server, whenever I try to configure
SharePoint Team Services, the computer prompts me saying
the sharepoint must be hosted on a web that supports
sharepoint services, ive tried to point to the root of
ISS, witho... more >>
Getting default of https:// instead of http://
Posted by David at 4/3/2004 9:51:05 AM
I am using SSL on the root of my web site. How can I force IIS to use "https://www.mysite.com" instead of the default "http://www.mysite.com" when someone types in "www.mysite.com
Thanks in advance
David Johnson... more >>
IIS security or cooking problem with form
Posted by Career Metasearch at 4/3/2004 6:55:26 AM
On my web page I have a form that I have created and it
requires a username and password. I was having a problem
logging in but I went into iis and enabled the cookies
and that fixed the problem. Now when I log in and try to
perform another action like posting a job it kicks me
back out ... more >>
can't open file
Posted by sally at 4/3/2004 4:56:41 AM
outlook express blocked an attachment on my email that i
need to open...please help..i know this is a security
feature...but it is very important i open this... more >>
Server object error 'ASP 0178 : 80070005'
Posted by Fredrik Nilsson at 4/3/2004 1:01:39 AM
Get this
Server object error 'ASP 0178 : 80070005'
Server.CreateObject Access Error
/SendZipFiles.asp, line 40
The call to Server.CreateObject failed while checking permissions. Access is
denied to this object.
on my win2003 iis6 asp page when component is registered in COM+ service.
How ... more >>
Setting up a subfolder for ssl
Posted by dp at 4/2/2004 11:06:05 AM
I have added an SSL certificate to IIS 5 to use on a subfolder of wwwroot requiring security. When I set "128 bit required" on the folder, users get "the page must be viewed over a secure channel". Where do I setup IIS to use https:// vs. http:// for this sub-folder? ... more >>
Prevent image hijack (hotlinking)
Posted by John Kenickney at 4/2/2004 9:12:00 AM
Is there a way to prevent people from hotlinking your images? On unix
servers this is done whith .htaccess, is there something similar on windows
based servers? I need something that doesn't have to be installed on the
server because I just rent a commercial co located server.
... more >>
Strange IIS Server behavior
Posted by sunilj20 NO[at]SPAM msn.com at 4/2/2004 4:47:26 AM
Hi all...
We have recently encountered a problem in a site. We have a local user
"iisuser" which is used to log into the server. I that the site was
installed under this user (which I don't know). The problem is that
since past few days the users are unable to access the site when the
server ... more >>
Basic and Windows authentication in IIS
Posted by Dennis at 4/1/2004 11:56:04 PM
I have an ASP.NET application that uses IIS windows authentication. We wish to extend this application to parteners who are not logged into the domain (and thus can not use windows authentication). Thus we have sent up a VPN connection into the application domain. We have a defined windows user o... more >>
Check security IIS 5
Posted by taja at 4/1/2004 10:57:49 PM
Hi,
Are their any tools available to check if your IIS 5 server is completly
bullet proof ? I want to check from outside if all exploits are closed by
the right SP
Thx,
... more >>
IIS6: OpenProcess Access Denied in w3wp.exe
Posted by karthik NO[at]SPAM peakstone.com at 4/1/2004 5:53:48 PM
I am trying to call OpenProcess() from the ISAPI filter running as
Network Service inside w3wp.exe to check the status of a process
running on the system as "LocalSystem" User, but my call fails with
error 5 viz Access is Denied. But if I run w3wp.exe as "LocalSystem"
User it succeeds.
Any cl... more >>
about inetinfo.exe
Posted by Rodolfo at 4/1/2004 5:26:22 PM
I have several instances of inetinfo running in my PC (and
also from svchost). How do we know who "called" that
process? Or whom is it sending information to? I just want
to know if there is some spyware or some unwanted stuff.
Thanks
Rodolfo... more >>
Windows 2003 IIS authentication problem
Posted by Greg at 4/1/2004 3:23:16 PM
I'm having a problem with Basic Authentication. I have a local folder that
is set for only Basic Authentication. I'm logged into the system as
Administrator. When I attempt to view it through IE 6 I'm asked for a
username and password. I supply it with Administrator (no password since
none i... more >>
access denied
Posted by Steve at 4/1/2004 2:56:43 PM
I am running windows 2000 server, sp4 and IIS 5.0.
I have several webs...They are all password protected
using integrated windows security. If I open a web in IE
and get prompted for the password, then cancel, all of
the webs display the access is denied standard error.
Except one, all it... more >>
auto authenticate
Posted by Anton at 4/1/2004 11:21:47 AM
I am running 2000 server, sp4, IIS 5
I need to be able to autoexecute an asp page from a batch
file that is placed in the windows scheduler.
I can execute the page fine, but I can't get past the
authentication. How do I pass the username and password
to windows via the URL automatically ... more >>
Getting Rid of Automatic Favorites and Homepage
Posted by Treyd72 at 4/1/2004 2:46:29 AM
Hi,
Recently I happened upon some page that has added 20 or
30 links to my Favorites List. I have went in and
deleted, but they always come back. The same goes for my
homepage, no matter how many times I change my homepage,
it goes right back to some porn homepage.
Can someone please ... more >>
Can't export reports to pdf into IIS folders
Posted by carlos.cruz NO[at]SPAM algeco.pt at 4/1/2004 1:40:07 AM
Hi,
I'm starting to develop an ASP.NET application and I've a problem.
I manage to export my report into a PDF file on every folder at the Server
except inside my IIS folders. (ex: a projects sub-folder).
I think this must be a security issue. Could anyone help me how to
configure my IIS to... more >>
Can not add operator
Posted by Randall at 4/1/2004 12:47:40 AM
Windows 2000 Server - SP4 - all hotfixes installed.
In the mmc for IIS 5, I try to add a user or group to the operators list
for a web or ftp site and the user/group doesn't appear in the operators
list. All other security functions work fine (file, folder, registry,
share etc)
Has anyone ru... more >>
|