I'm serving a small personal site to learn about all that goes into it Especially the security part. I'm running IIS 5.1 on XP Pro. Fully updated. Passwords for BIO access, boot and all user accounts. Norton Internet Security 2004 an NAT behind a linksys router. I know there's alot more to s...more >>

Does anyone out there know what an msvcrt.dll invalid page fault means I'm getting sooooooo pissed, I can't seem to fix this evertime I go to a new page I have to shut down my program please help. Thanks Whenddogg...more >>

Hi, I am just 1 hr old using IIS 6.0. I am trying to create one virtual directory, which can be created easily. But when I try to access it using http://localhost/MyWebService/Default.aspx. It shows me 404 - File Not Found Error. To make it run, what do I have to do? -- Thanks & Regards, ...more >>

How do I stop the pop-up's from appearing on my computer.I am o a Microsoft XP syste ...more >>

We have IIS 5.0 or 6.0 and I was going through the wizard to obtain a CSR for a client. I got to the step where they ask for what bit length, but there is no option for 128. The lowest is 512bit How can I get an option for 128bit? Is it a service pack or something Thank you for any help you can...more >>

We are downloading antivirus signature file from web to FTP Server. When users login, clients will automatically download the updated signature file from the FTP Server. However, we would like to find out the best way of downloading the signature file from web to the ftproot directory. ...more >>

Two weeks ago two sets of my IUSR & IWAM accounts decided to restrict themselves to logon to but one computer and to allow logon during a certain set of hours. The computer they are configured to logon to does not exist in my domain. The hours the accounts are permitted to logon to are t...more >>

Okay, here's the story: Win2K, IIS5 We have several ASP pages that access Access databases located on a Novell server. We had the Novell server's administrator add an account with the same name as the account we have registered in the AD. We coordinated the passwords. I added this accoun...more >>

Sometime ago, I setup IIS and never had problem getting to http://localhost I have now switched to Firefox as my browser, and when logging to http://localhost, it asks for username and password. Im sure this is a IIS security feature. Does anyone know the settings and where they are located Thanx ...more >>

I need help with hardening the TCP/IP stack, I have a multihomed server. I want to add the SynAttackProtect and other hardening keys to the registry. My question since they are not present in the tcpip/parameters key or in the tcpip/parameters/interfaces/"Speceific Interface ID" Do add ...more >>

I have just installed .NET Framework 1.1 via Windows Update on a Wndows 2000 server, setup a virutal directory for my website and added some test pages. On testing, my aspx pages return the error message "Server cannot access application directory" (.htm and .asp pages work as normal.) ...more >>

Hi, I configured IIS 6.0 to Require Secure Channel (SSL) and I assigned value 443 to the SSL port for the default web site. I also checked Ignore Client Certificates. The server has not been assigned a certificate (we care more about encryption of data than authenticity). When trying to connect ...more >>

Currently I have a win2k web server with secure server ID installed and hosting web page www.abc.com. I have tested browsed to the web site by key in web site https://www.abc.com and it was working fine. The connection is as below: Client web browser < ------------------ > web server h...more >>

Hi I try to run my web service under an Application Pool with a specific identity. I created a Windows group for that identity and gave that group full access to the web service directory. The group has also the local security privilege to logon as batch. When I try to connect to the web servi...more >>

ok, so about a week and a half ago i contracted a vicious spyware that I call the "about:blank" spyware. this thing changed my homepage to the URL "about:blank" but a webpage that is titled "Seach For..." with various subjects like "art," "cars," and "shopping." now, im no fool. i tried...more >>

We have a network share set up as a virtual directory in IIS and we want only certain users to have access to the files...two domain group members and no one else. We have the NTFS permissions set up properly, but when accessing the files through IIS, it lets anyone open the files. How can I r...more >>

Hi people, I am having a hard time trying to find out how to grant an ordinary local user at my W2003 Web Edition server permission to create a COM+ Application. I even don´t know if it´s possible. The only information i found until now points to the only thing that worked: inserting my use...more >>

Hi, Any one known how to fix Iexplore caused an invalid Page fault in module<unknown> Tried to reload Ver 6 tried to Repair it to. Thanks, John1798...more >>

Since the last Security Updates I get an Error while Banking. Iexplore Caused an Invalid Page Fault in Module <unknown> 0000: XXXXXXXX...more >>

On our server we have run IIS Lockdown, now encrypted email being generated by asp scripts cannot be generated. I have tracked down the following line in the oblt- log file. DenyACE<0,(0 1f01ff),(0 1f01ff)>C:\WINNT\system32\gpg.exe Now, how do remove gpg from this list, do I have to run IIS ...more >>

Programmatically Altered IIS Security? My server is running IIS5 on Windows 2000. On Monday morning one of my techs installed two updates from Windows Update: 1) Root Certificates Update 2) Update for Windows Media Player 9 Series (KB837272) Let's leave aside the point that there is prob...more >>

Hi, Ever since we rebooted our Win2K3 server on 28th April, our IIS website has been insisting on entering a network password before it displays the home page. If I use IIS Manager to "Restart IIS", the problem goes away. But at different times of the day, somehow, the problem comes back a...more >>

I have set up a standalone root CA and have placed the required certificates in the needed stores. I assigned the certificate through IIS5. When I try and connect via https I get a message that the certificate date is OK and that it is trusted. But I get a warning that the name on the certificate...more >>

We have disabled anonymous access to our corporate intranet. It is setup the site using basic authentication and set it to default to a single Active Directory domain. A couple of our telecommuters (using IE 6 on XP and W2K) are having issues accessing the site. If they do not enter the u...more >>

My win 2K3 std box has 4 static IPs. each of them have been assigned to both the IP card and to an IIS = website. The problem I'm having, is that only the last IP will show the website = to other computers. The first three websites are only visible to the internal browser. I need to know wha...more >>

Hello, I have followed KB article 290625 to set up SSL on a test website. I have a valid certificate, my default website is set to IIS, 128bit and the certificate has been imported. Even on the laptop where I am hosting this site once I switch to SSL the pages cannot be displayed, even j...more >>

Hello, Is there anyway to strip the header or response you receive when connecting to an IIS 5.0 server running FTP? I used the URLSCAN utility to strip the http header, but cannot find a way to do so with the FTP service. When ftping to my server: it responds, 220 "hostname" Microso...more >>

I've got an ftp server set up to transfer some files from an old SCO UNIX machine on our LAN. The server has been configured for anonymous connection using the IUSR_MACHINENAME user and all, but recently, some french peer-to-peer users have been dumping strange, deeply- nested files into o...more >>

I have been trying to get my intranet web site to automatically display the change password page when the user's password is about to expire. I have configured the IISADMPWD virtual directory according to KB 184058. Reading through the KB articles I could find, I get the idea that there is supp...more >>

As part of a W2K3 standard build I'm working on I've set the "Deny Access from Network" security option to include the GUESTS which has the expected result of disabling anonymous access (IUSR_MACHINE being a default member of the guests group). Microsoft W2K3 Security guidance docs recomends m...more >>

My server is running IIS. If it sits outside the firewall, anybody can access its resources, whether inside or outside the firewall. If it's inside the firewall -- and I've set up the various pinholes -- only computers OUTSIDE the firewall can access resources. No computer inside the firewall ca...more >>

hi i m using win xp and iis 5.1 and machine name is comp1.. my all asp pages works fine on http://localhost/ and http://comp1/... but when i tried to access using url http://comp1/ from different computer which is in same lan gives error page cant be displayed... thanx in advance ...more >>

I used autocomplete and didn't notice that it would erase my password for my email address so how can I fix this problem...more >>

Hello, I'm running a proprietry TCP/IP program that utilized TCP Port 2000 for communication. This program sends messages back and forth between the host and clients. My issue is that if I run both client and host on the same comupter they don't run on XP. This problem didn't exist in ...more >>

I am working in a Domain. My Web farm uses IUSR_GUEST as a common domain user for the IIS logon. Is it possible to do the same with the IWAM user account? We are using .NET and it isn't as easy to change that user. Are there any good publications or references out there on this subject?...more >>

Every know and then I see event ID 7031 in my event log in my windows 2k sp4 machine running IIS 5.0. I have applied all security patches that I found. But it did not fix the problem. My Web server is also running Coldfusion 5.0. Here is the error message: I happen to notice an errors on the ...more >>

Hello, When I send an CSR request to Entrust (for an SSL certificate), what do they do with this request? Are they simply digitally signing the public key? TIA Best regards, Veets ...more >>

I changed the private network IP on a server which has a SSL certificate installed on it. The public IP did not change. The server bacame unreachable on the Internet and somehow resolved to the old PRIVATE address. When I changed the private address back, it resolved properly to the publi...more >>

IIS 6.0 Win2003 Server Hi folks, what are the default settings for the Default App Pool and the MS Sharepoint Pool? I need to go back to original settings..... Thanks!...more >>

I have installed at least 2 different client certificates (on a Windows 2000 box), I can see them in the 'Personal certificate store'. It shows that I have the private key that corresponds to the certificate. It shows 'Client Authentication' in the intended purposes. However when I try to hit a s...more >>

trying to create/install a test certificate with IIS5.1 (winxp Pro) I have obtained Simple CA for generating a certificate via open SSL. Running it produces the following files: ca.key ca.db.serial ca.log ca.crt ca.db.index but there is no clear explanation of how to proceed from this ...more >>

Which support number do i dial to get support for w32sasser.worm ? ...more >>

...more >>