all groups > iis security > april 2004 > threads for april 22 - 28, 2004
Filter by week: 1 2 3 4 5
Contantly restarting IIS?
Posted by rickreyn at 4/28/2004 8:57:16 PM
Help??
Newbie....
Set-up IIS to run on XP machine.
I have set-up local, remote & test site on computer.
Using ASP & access.
Everytime I update an asp page and put it to the remote server, I have to
restart IIS.
Is there a security setting or something that needs to be adjusted?
... more >>
Third party DNS Providers
Posted by Marc DeLuca at 4/28/2004 7:50:57 PM
I'm really hoping that someone can point me in the right direction. I have
a (remote) dedicated webserver which I lease. It is running Window 2000
Server. Everything used to work perfect until my server hosting company
decided to begin charging outrageous DNS hosting fees. When this occured, ... more >>
Requiring Client Certificates
Posted by Steve Cook at 4/28/2004 5:42:40 PM
We have an online root CA and two online subordinate CA's. These are not
enterprise CA's. Two of the CA's are standalone servers and one is a domain
member server. Issued certificates will be used for data encryption. A COM
object is used to request certificates on behalf of our users (CAPI and
... more >>
Changing Win2k Password via web page
Posted by Ron L at 4/28/2004 2:51:36 PM
We have a SQL application with an IIS 5 front end. We use Windows
Authentication in IIS to authenticate users. Our application is on a
machine that is it's own domain, but trusts the domain in our office. We
have recently added users from another office who will be accessing our
system via th... more >>
change password IIS 5.0
Posted by mshiver at 4/28/2004 1:04:44 PM
At my school we automatically create Windows 2k accounts for each student
and set the "require user to change password on next login" option. The
problem I have is that we have a student intranet that students need to
access. It is protected with basic authentication. If a student tries to
acc... more >>
How do I deal with "Password Synchronization is not supported"
Posted by Burton Wilkins at 4/28/2004 1:01:07 PM
PROBLEM 1
I am trying to “Configure Anonymous Authentication in IIS†for a web site where I would like to use ASP.Net forms-based authentication. While the “Anonymous User Account†dialog is displayed, and I set the “Allow IIS to control password†checkbox, I get the following message... more >>
internet explorer
Posted by brendon at 4/28/2004 6:09:30 AM
each time i set my homepage to the a certain page and
click apply, and when i open my internet explorer again,
the homepage will automatically change to some nuisance
page. can i know how to solve this problem?
and also, whenever i want to close my ie window, it seems
that i cant close it n... more >>
ISS6 allow executables to be runned
Posted by Tjeerd van Beek at 4/28/2004 4:16:02 AM
I have made an simple test application in VB.NET which I can't run under IIS6 but under IIS5.1 it doesn't have any problem
I think that the problem is something with security in IIS6 and/or Win2003 Server
I tried to let IIS run under the administrator account, this gave the same error as the norm... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
New Security hole?
Posted by Kfir at 4/28/2004 2:59:02 AM
I may found a new security hole in IIS. Some of my=20
websites stopped responding on http, I checked the logs=20
and found this:
SEARCH /AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA... more >>
spy ware
Posted by Amanda at 4/27/2004 9:49:35 PM
What is the deal with all these pop-ups saying that spy
ware has been detected on your computer, is it ligit?... more >>
HTTP Error 401.5 - Unauthorized: Authorization failed by an ISAPI/CGI application.
Posted by CJM at 4/27/2004 5:32:34 PM
I have developed a simple ASP search facility which uses the Indexing
Service.
The page works on my machine, but when I moved it across to the live server
(Win2k3/IIS6) I get this error message:
HTTP Error 401.5 - Unauthorized: Authorization failed by an ISAPI/CGI
application.
Internet Inf... more >>
authentication
Posted by Lance at 4/27/2004 3:26:01 PM
I'm researching authentication of Windows 2000 terminal services and IIS over the Internet. No VPN and no SSL in place but we do have an appropriately configured firewall. Everything works fine but I'm concerned as to whether or not I'm exposing the username and password to the public Internet.
AN... more >>
Secure upload page 2
Posted by Joe at 4/27/2004 1:50:41 PM
Hello Roger
I have created the subweb account as you have said to be
the simplest. But the same problem remains anyone with FP
can enter the web the usr has to be an Author to submit
the file. I can't get aroung this unles you know a better
way I am struggling here.
https://animocracy... more >>
How to configure network Id and subnet mask
Posted by chandrasekhar_nunna NO[at]SPAM yahoo.com at 4/27/2004 8:56:36 AM
Hello All,
I want to configure to allow a group of computers to access the a
virtual directory and we are trying to grant the access to a group of
computers..
According to the IIS help we should add the computer IP on which the
web server is running and subnet mask.
For eg if a computer ... more >>
.NET Remoting failed with HTTP 401.5 from IIS 5.0 with NTLM
Posted by Sin Min at 4/27/2004 3:16:02 AM
Good day!
Scenario
----------
Win2k Adv Svr + SP4 + UrlScan + NTLM only (No Anonymous allowed)
Internet <--- resp/ req ---> WebSvr <--- .NET 1.1 Remoting ---> AppSvr (Remote objects in IIS)
As far as I know, the first call to the remote object will failed with HTTP 401.5 before the second tr... more >>
IIS 5 now wants logon
Posted by Charlie at 4/27/2004 1:27:27 AM
I'm using IIS 5 on Win2000 server, using ssl for my
internet site. Site name example was
https://site.domainename.com. Two nic cards - 1 into the
lan the other to the firewall. Site worked great from the
outside.
I removed one nic for a couple days from the web server
(website not pub... more >>
Outlook Express
Posted by namrufg NO[at]SPAM yahoo.com at 4/26/2004 5:58:05 PM
I just started with a DSL and when I open Outlook Express
and receive an email with an attachment it won't open. The
error message says, "OE removed access to the following
unsafe attachment in your mail".
I know the attachment is safe because it was a family
picture. Can someone help me?
... more >>
Strange OWA access error for some users? (Exchange 2000)
Posted by Peter at 4/26/2004 5:18:47 PM
My Exchange 2000 server handles four different e-mail domains but only users
that have one of these e-mail domains gets access to OWA. For the others
they get three login attempts and then auth. failure.
If i add the "working" smtp domain address to a non-working user its works
just fine.
I... more >>
Download prompt
Posted by joe joe at 4/26/2004 12:57:11 PM
when downloading a file from the interent the prompt
message to save or open the file appears... Mine doesnt
appear anymore... does anyone know how to get it back???... more >>
[IIS5] Application Server Error on ASP pages in pooled or isolated mode
Posted by Florian Zimmermann at 4/26/2004 11:26:37 AM
Hi everyone,
we see the Application Server Error whenever we call an ASP page on our
server lately. This happens when the application mode for the web is pooled
or isolated. As I figured out by now, this should be related somehow to a
security problem.
What we did to solve the problem so f... more >>
Spyware Killer
Posted by Dave at 4/26/2004 9:00:41 AM
I tried the above Spyware program, but did not elect to
purchase it after the trial. I downloaded Search and
Destroy and have run it. Now Outlook and Internet explorer
cannot locate the server for internate access? Any
suggestions?... more >>
Internet Home page
Posted by mitch at 4/25/2004 8:29:34 PM
Everytime I set my Internet home page to the page I would
like to see come up everytime I open Internet Explorer,
another page establishes itself as my home page. Ex: I
will go into internet properties, type in the desired home
page and hit apply. When I open Internet Explorer the
first... more >>
address automatic complete
Posted by kurt at 4/25/2004 8:07:09 AM
my internet automatically posts the previous websites I
have visited when I type one letter into the address
field. I deleted all of my cookies and files and the
history- so I did a search to find what was holoding
them. I may have found it in my C drive under a file
called system 32. I... more >>
My Phone Bill
Posted by anonymous NO[at]SPAM discussions.microsoft.com at 4/25/2004 7:24:15 AM
help!!! someone has my password for a unsecured site and
are using my phone to make calls to some place Sao Tome
my phone bill is through the roof I need help to stop
this .... more >>
Secure an upload page
Posted by Joe at 4/24/2004 9:56:19 PM
Hello,
Need some advice (please) on how to secure an upload page
on my web?
As I can see it the page asks for a password as it is
which is my admin. account and password.But I want this to
be available to others and I cannot of course give out my
password.
I have however added a user in... more >>
HELP!!!
Posted by HELP!!! at 4/24/2004 4:00:26 PM
Agh please help all my work has gone!! had a power cut
and when i logged on everything is gone!! there are no
files, no start menu and there is only a screen saver!! i
am currently using windows xp professional and need a
litlle help! thnx!... more >>
Help please - Deleting files - Access denied
Posted by dave at 4/24/2004 1:11:31 PM
I have some files on my C: drive downloaded from a number
of websites and saved in a folder. I have tried to delete
them, and I get the message "Access denied. Source file
may be in use"
I have tried the Command Prompt using rd /s/q, and still
it does not work - I am told I do not have a... more >>
defragmenting
Posted by dennise745 NO[at]SPAM aol.com at 4/24/2004 10:42:37 AM
can someone tell me what contiguous files are???
and if they can be removed ????
and if so how to remove them ?????... more >>
Lost username and password
Posted by NJccow at 4/23/2004 4:26:04 PM
Well, I installed IIS a looong time ago, but am now just getting involved. When I try to access http://localhost, it asks for username and password. I spose you could guess I have no idea what they were....
Any ideas on workaround? I have tried removing IIS thru Control panel-Add/Remove Windows com... more >>
Messenger Service Pop Ups
Posted by Kevin S. Hallett at 4/23/2004 2:00:52 PM
I keep getting in-undated with Messenger service Pop ups
often advertising Sex etc and it is becomming annoying. I
have tried virtually everything to get rid of them. If I
leave my Pc connected to the internet for any length of
time these pop ups come on over the top of the main
screen, pr... more >>
IIS Permissions and Rights
Posted by shinerma NO[at]SPAM access.k12.wv.us at 4/23/2004 12:17:14 PM
Classroom situation
Running Windows XP on local computer in classroom
Running Windows NT on school file server in building (used
for saving and retrieving students files only-no
applications are stored on this server-SUCCESS domain)
Running Internet Information Services 5.1 on localhost
com... more >>
ODBC database
Posted by Ricardo at 4/23/2004 11:43:27 AM
I use ThumbsPlus to scan photos for my website.
Apparently it is database driven. Here is my problem: I
have Earthlink Total Access on my computer (a very large
file) which I no longer use but everytime I uninstall it,
I cannot use ThumbsPlus. Thumbs is looking for/using an
ODBC databa... more >>
Site Access
Posted by Ricardo at 4/23/2004 10:51:01 AM
I have a internal site (intranet) on my LAN. When Internal users attempt to browse it on there IE 5.0, its displayed a message saying that the user is not authorizer to display the site, but on IIS configuration , I have set it o Anonymous authentication
Why users can't gain access to the site
Is... more >>
IUSR permissions and sockets
Posted by fgasper NO[at]SPAM uiuc.edu at 4/23/2004 7:45:09 AM
Hello,
Does anyone know what permissions the IUSR account needs to open UDP
and TCP sockets? I have an application that runs fine when IIS
executes as me (administrator-level), but obviously I need things to
be more secure than that. When I switch to the IUSR account, my
application logs tell... more >>
IISlockdown and URLScan
Posted by hugo.flores NO[at]SPAM ge.com at 4/23/2004 6:31:29 AM
Does the IISLockdown tool comes with URLScan or do I have to download
them and install them separately?... more >>
Product Support Services - MALICIOUS ACTIVITY RELATING TO MS04-011
Posted by Jerry Bryant [MSFT] at 4/22/2004 11:01:14 PM
Note: www.microsoft.com/technet/security and www.microsoft.com/security are
authoritative in all matters concerning Microsoft Security Bulletins! ANY
e-mail, web board or newsgroup posting (including this one) should be
verified by visiting these sites for official information. Microsoft never
s... more >>
Installation of IIS
Posted by Anthony at 4/22/2004 10:42:05 AM
Is there any known way to install IIS to somewhere other
than the C drive?... more >>
FTP Authentication not working
Posted by outer.axis NO[at]SPAM btinternet.com at 4/22/2004 8:49:09 AM
Hi,
I have a Win2000 server running FTP in IIS. I have the FTP set up in
the Properties -> Security Accounts tab so that it does not allow Anon
Connections. In FTP Site operators I have the Admins group plus a
named user say ftpuser (which is a member of the Users group only)
defined to allow... more >>
SSL Stops Working
Posted by gortguy NO[at]SPAM hotmail.com at 4/22/2004 8:23:27 AM
I have had an SSL-protected server running for quite sometime with no
issues. Over the past few days, the site will stop servicing SSL
requests and will respond with a "page not found" error. Port 80
requests are handled just fine. In reviewing the event logs, I have
found an error that occur... more >>
error -2147022675
Posted by Veron Payden at 4/22/2004 8:17:10 AM
logging into OWA and being prompt to change password.
Internet Service Manager for IIS 6.0
gives error number -2147022675... more >>
|