all groups > iis security > may 2004
Filter by week: 1 2 3 4 5
Secure and non-secure message
Posted by cjobes at 5/31/2004 11:11:51 AM
Hi all,
I'm starting a new thread because the issue has changed. I'm testing an app
that the software company claimes runs through SSL. I was able to install it
on IIS6 and I can connect via https. Every second or third screen it brings
up the warning box "this page contains secure and non-sec... more >>
Access Denied
Posted by Simon at 5/31/2004 8:47:14 AM
Hi,
I have Windows Server 2003 with IIS 6 and CMS 2002 for my
intranet. Everything was working well on my development
server. But now I try to put it on my production server,
and when I try to access the intranet, I get an ASP.NET
which basically tells that ASP.NET can't access IIS. A
c... more >>
Siteminder integeration problem with IIS
Posted by sumeet at 5/31/2004 6:11:01 AM
I configured Siteminder with IIS .When I am trying to run. I am getting the error
Unable to load SiteMinder host configuration object or host configuration file
C:\Program Files\Netegrity\SiteMinder Web Agent\Config\SmHost.conf
Please advice... more >>
New exploit?
Posted by google NO[at]SPAM gamestah.com at 5/31/2004 2:46:35 AM
Recently one of my IIS boxes got rooted - all active sites were
defaced and more importantly the hackers managed to get access to some
databases which reside above website's roots (eg: website root is at
c:\web\html, and the db resides in c:\web\data).
In the logs the following info:
cs-metho... more >>
Internet Options Lock
Posted by Bob Z at 5/30/2004 5:49:15 PM
After I downloaded and installed the Service Pack for
windows XP Home Addition, I found that I was unable to
change the Internet Options found under tools. I know
there must be a way of canceling this options lock but i
don't have any idea what to do. Do any of you?
Help if you can. It w... more >>
SPS wont use kerberos
Posted by Al Blake at 5/29/2004 8:25:25 PM
We have a windows2003 member server in a native AD domain that runs SPS2003
as well as a number of non-SPS IIS6 web sites.
We have managed to configure all the web sites *except* SPS2003 to use
kerberos as their preferred authentication - so we know kerberos is working
on the box.
We have fol... more >>
We ALL need to know
Posted by Joe at 5/29/2004 7:10:31 PM
There is a very vicious variant out there called Purity
Scan
I tried everthing there is to remove it but this was the
only way
http://www.purityscan.com/uninstall.html
Spybot and ad aware are useless against this.
Thank You, Joe... more >>
Pop Ups
Posted by Joe at 5/29/2004 4:40:31 PM
Hello,
I am in need of assistance here please.
I am getting popups on my server.I have run ad-aware and
Spyware blaster I have removed a few things they found but
I am getting more occasionally. I don't know where because
Ad aware is not finding them. I also see a pop up quickly
diappear... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
IIS Seperate Partition?
Posted by Ryan Riddell at 5/29/2004 4:01:04 PM
I'm running Server 03 with a web server and file server as well as acting as a domain controller
My question is if it would be more secure or considered a good idea to have the web server on its own partition
The idea being that if a malicious user manages to take control of IIS they are sort of... more >>
SSL on IIS6
Posted by cjobes at 5/29/2004 12:53:51 PM
Hi everyone,
I'm testing a new app on a standalone 2003. The website is mapped to a
single IP address that is only used by this website. The app works fine with
anonymous access. I want to use SSL for the sole purpose of encrypting
traffic. User authentication is done within the app.
I inst... more >>
ASP Files Error
Posted by Asif Attari at 5/29/2004 10:19:14 AM
When I run asp files using ordinary users (dont have
administrative rights, just members of Domain Users group)
its prompt me User, Password & Domain, when I put user's
info again which is login as interactively its not
accepted, or when I put user, password & domain who has
equal rights t... more >>
Raise error when requesting files..
Posted by Solle at 5/29/2004 8:56:01 AM
Just wondering if its possible to raise an error when requesting eg. a JPG file, just like requesting the global.asa
When requesting the global.asa you'll get the "HTTP Error 500-15 - Requests for global.asa not allowed" error ... and I would like something similar with the .JPG file...... more >>
IIS 5, SSL and multiple sites
Posted by Jeff C Greenville SC at 5/29/2004 6:33:52 AM
I've got a web server running IIS 5 with multiple sites.
I have given the box an IP address for each of two
different sites. We've installed two certificates, one
for each site. I've read the note 187504 in Microsoft's
knowledge base that says multiple certificates can't be
used because... more >>
IUSR Password
Posted by Asif Attari at 5/29/2004 5:53:12 AM
I have IIS 5 on w2k with sp4. Whats the default password
of IUSR. I am running IIS on Domain controller.... more >>
can't get on to secure sites
Posted by Ben at 5/28/2004 12:37:57 PM
One day my pc using explore5.1 stopped getting on all
sites begining with the IP address 191 please help
thanks... more >>
Enter Network password prompt
Posted by nicolas.miron NO[at]SPAM cgi.com at 5/28/2004 11:23:10 AM
I've got a problem that hopefully someone can help with...
I have a website on "DomainA" (IIS Win2000 server) setup with Windows
Integrated Authentication. If I'm logged on DomainA on a workstation,
and try to access the website using IE, everything goes thru normally
(expected behavior).
... more >>
I can rename folder W3SVCn?
Posted by gbartoli NO[at]SPAM hotmail.com at 5/28/2004 7:25:43 AM
Hi, I have 3 webserver with the same IIS configuration, on every
server there are 5 similar sites, but the folders,
%WinDir%\System32\LogFiles\w3svc1.. not are similar for every site on
every server, for example, the first site on first server put the log
on ..w3svc2, on other server the same si... more >>
How to change my password
Posted by Lisa at 5/28/2004 7:03:36 AM
Can someone please tell me how i can change my original
username and password on my dial up connection account?
Help me please??... more >>
autherntication methods IIS 6
Posted by BJM at 5/27/2004 11:56:08 PM
Guys
I have a thorny problem which I hope someone can shed a little light on for
me.
I have an windows 2000 machine running a secured virtual directory (VD),
inasmuch as that the anonymous access has been disallowed for that VD.
Instead the VD is set to use integrated windows authentication... more >>
Forcing Kerberos authentication in IIS6?
Posted by al NO[at]SPAM blakes.net at 5/27/2004 11:15:25 PM
I have two windows 2003 servers running IIS6. One is the production
server, one is the test server.
I have developed an asp.net app on the test server that requires
kerberos authentication and *works perfectly*. I have transferred it
to the production server and it doesnt work - on closer invest... more >>
Impersonation and SQL access (again)
Posted by Al Blake at 5/27/2004 6:41:23 PM
I have read about 10,000 posts on this topic but still can't get it to work
:(
We are designing a web app under ASP.NET VB that connects to a SQL database.
It needs to connect as the AD user currently using the browser (ie windows
authentication), because we already have all the security setup c... more >>
NEED: Network Monitor
Posted by AOrlando at 5/27/2004 2:53:08 PM
I am looking for a good piece of software, free (freeware) is best, cheap is
good, expensive is BAAAAD. :)
All I need the tool to do is this:
* Install and sit on a Windows 2003 server.
* Monitor ports 25, 110, 80, 21, 20
* Record a log file of every IP address accessing the above ports with ... more >>
Tech Forums
Posted by mortin at 5/27/2004 8:46:58 AM
www.technutz.com
It is new and free so post it up
... more >>
SSL VPN Website -- Please Help
Posted by Joe Hardin at 5/26/2004 8:55:15 PM
Please forgive me if this is not the best newsgroup for this problem, but I
have looked everywhere for answers and now I'm here.
Is it possible to take a WindowsXP machine and enable IIS and build a small
website that I could access from the internet, be authenicated at and then
have access to... more >>
Redirecting from http to http pops up a login box
Posted by tonyz.wrightz NO[at]SPAM consultant.com at 5/26/2004 8:15:59 PM
Hi,
I am trying to secure a credit card page. I redirect to the credit
card page from the url:
http://mipdev05/features/myshops/MsShopCheckout.aspx?ID=a4f12d4d-e2fd-4785-83ec-4ea2ed1ca48c&P=1&VT=G
to the url:
https://mipdev05/features/myshops/MsPaymentDetails.aspx?ID=a4f12d4d-e2fd-4785-83ec-... more >>
Norton Anti Virus
Posted by John McP at 5/26/2004 3:09:50 PM
Is there any reason Y I cannot get live updates? Its
keeps telling me i have an error and asks if I am
connected to the internet which I am. In addition to
this when I try to go to the British Symantec website for
support, i cannot connect as the web page comes up
telling me that my sett... more >>
IIS 6.0
Posted by julia at 5/26/2004 2:09:08 PM
I currently have WinXP with IIS is activated. I would
like to upgrade my IIS to vIIS6.0.
Can someone tell me where can I download a copy of IIS
v.60? I could not locate a copy of IIS 6.0. on the
microsoft web page.
thanks,... more >>
FrontPage
Posted by Tien Appert at 5/26/2004 1:31:21 PM
how to disable the frontpage srver extension... more >>
IIS
Posted by Tien Appert at 5/26/2004 1:27:23 PM
How to disable HTTP TRACE support on the Web Server by
using the URLScan tool.... more >>
Link with Internet lock e-mail and Intranet access, router only receive packet (RX flash and TX not flash)
Posted by Dilmar at 5/26/2004 5:21:03 AM
I have a problem because somebody include a ping command into some script which DLL is in c:\winnt\system32\inetsrv (w3svc.dll)
This command ping address 69.93.251.52 with 8KB and link lost performance
I get information in log file c:\winnt\logfiles\w3svc1\...
To solve problem I cut connection of... more >>
SSL certificates
Posted by Gary H at 5/26/2004 1:35:22 AM
Hi,
I have a WebService under IIS 5.1. I want to make the WebService use SSL
with certificates for the server and the client. Is there a way to generate
some test certificates to try it out? I tried going through the OpenSSL to
do it but I gave up trying to read the UNIX/OpenSource type ... more >>
Unable to add new admin user to a site
Posted by Randall at 5/25/2004 9:31:11 PM
I can not add a new admin user to a web or FTP site. I can add global
groups such as CREATOR OWNER or DIALUP but no individual users and no local
groups. I ran IISLockdown just before this started happening. All other
security appears to be OK.
The machine is running W2K AS and IIS 5, it is... more >>
SSL certs stopped working
Posted by cchill7 at 5/25/2004 5:31:02 PM
I have a pool of 6 servers that host the same website and use the same SSL cert from Thawte. Today SSL stopped working on every server. ANy ideas? Here is an error message I found on one of the servers
Event Type: Erro
Event Source: Schanne
Event Category: Non
Event ID: 3687
Date: 3/9/200
... more >>
can't show IIS help
Posted by vsd at 5/25/2004 5:26:18 PM
Browser http://localhost/iisHelp/iis/misc/default.asp show empty tree in
left pannel. What is the matter?
... more >>
Can't edit my sharepoint pages after enabling SSL on my site
Posted by A. Fox at 5/25/2004 4:54:32 PM
Hello all!
firstly, sorry for the cross posting, but i'm not sure which group this
belongs in!
I've just enabled SSL on my sharepoint site, and tested it from both sides
of the firewall, everything seems to be ok. The only problem is that now i
can't customise my pages in Frontpage 2003 by cl... more >>
SSL in Win2003 server WEB EDITION? Texon
Posted by news.aspware.net at 5/25/2004 9:42:14 AM
Does anyone have any ideas as to how I can secure web pages on Woindows 2003
server web edition?I
have installed Windows 2003 Web Server Edition and have a bunch of work I
have created on the web site and such now I find out that Certificate
services cannot be ran on 2003 Web edition. I think t... more >>
Unable to connect to or browse a secure web
Posted by hfl at 5/25/2004 9:30:22 AM
Ok, I know this should be easy but I haven't been able to
find the answer. I have recently installed an SSL
certificate on a W2000Server machine. From the internet,
communication to and from both the http and https side is
working fine. However, I now cannot access an external
https sit... more >>
Rights to create virtual directories
Posted by Jay Griffin at 5/25/2004 9:04:49 AM
With Windows 2003/IIS 6 is administrator rights required
to run IIS Manager?
Is there a way I can allow someone to create virtual
directories without giving them Administrative rights?
Thank you!
... more >>
Unwanted home page in IE
Posted by anonymous NO[at]SPAM discussions.microsoft.com at 5/25/2004 7:44:50 AM
Every second or third time I restart my computer I have
an unwanted home page in my IE browser when I open it. I
always go back into Internet Options and change the home
page back, but this keeps happening. How do I change
this so it never happens again?... more >>
Deny IP Address
Posted by basin at 5/25/2004 7:01:07 AM
I have a site which I grant only ONE ip address (one user) access by using iis security. I also have Basic Authentication set up and am trying to set it up so that everyone else gets a username/password prompt if they are not coming from that one ip address. Right now it just gives them the "acces... more >>
unwanted pop-ups under IE browser
Posted by D.P.Das at 5/25/2004 5:23:51 AM
How do I get rid of automatic pop-ups planted in my
computer that are both irritating and unwanted? How do I
deactivate the relevant files/programs?... more >>
How do I protect download files being directly accessed through URL info?
Posted by karthik at 5/25/2004 1:01:03 AM
Hi all
I have a basic question
I intend to create a page from where the user can download a file (exe, xls etc..). The page by itself is protected, requiring the user to logon (it is a simple SQL Server based User ID/Pwd authentication and not Windows logon) before getting on to the page. But onc... more >>
SSL
Posted by Melvin, Tom at 5/24/2004 11:04:54 AM
We have a Windows 2000/IIS 5.0 Server for our Intranet. Essentially, =
anyone inside our organization can access the site with no security =
required [e.g. passwords, etc.]. We would like to open this up, and =
allow people on the outside. However, how to we set this up to prompt =
for a usernam... more >>
changed IUSR pwd, now anonymous access login fails. tried...
Posted by sierrasnow NO[at]SPAM cox.net at 5/24/2004 10:09:01 AM
For company intranet, I changed the IUSR pwd with UM4D and moved
Daemons from SYSTEM to a special user. Gave this special user
advanced rights to logon locally and logon as service. I also made
WWWroot a share and Everyone has read access. Event viewer says
Unknown user or bad passwd. I've s... more >>
FTP Welcome Message Date/Time
Posted by Ron at 5/24/2004 6:41:03 AM
We need to display the login date/time in the IIS Ftp server Welcome Message. Are there veriables, like %m or $month that would display the mm/dd/yy, hh:mm.ss??
Thanks
-Ron... more >>
Internet Explorer
Posted by Malcolm at 5/24/2004 2:22:16 AM
I have been merily using the password on the content
control on our home computer and mnow find that one of my
Kids must have seen me use the password and they have
changed it. It means that the rest of the family is unable
to use explorer as the person who changed does not want to
own up.... more >>
ActiveX
Posted by Jacobs1003 NO[at]SPAM aol.com at 5/23/2004 9:49:14 PM
I get the following message and don't know how
to "correct" or get rid of the security setting.
"Your current security settings prohibit running ActiveX
controls on this page. As a result, the page ay not
display correctly."... more >>
Internet Explorers Favorite File
Posted by roger at 5/23/2004 9:37:17 PM
While surfing I unknowingly picked up something which has
taken control over my favorites file. Though I remove
various unwanted items, when I envoke Internet Explorer
the unwanted items are back. What have I got and, more
importantly, how do I get rid of it?>... more >>
transfering personal information
Posted by Pete Snow at 5/23/2004 6:33:10 PM
Please Help.
I am using windows XP home and internet explorer 6.0.
When I try to register a new account on certain web sites
I have this problem: I fill out the form with all my
personal details then I press continue and it takes me to
the next screen that displays my details. Then I press
... more >>
Server Application Error
Posted by anonymous NO[at]SPAM discussions.microsoft.com at 5/22/2004 5:31:45 AM
When I browse to HTTP://localhost/defacult.asp, it shows
the message:
Server Application Error
The server has encountered an error while loading an
application during the processing of your request. Please
refer to the event log for more detail information. Please
contact the server admi... more >>
|