all groups > iis security > may 2004 > threads for may 29 - 31, 2004
Filter by week: 1 2 3 4 5
Secure and non-secure message
Posted by cjobes at 5/31/2004 11:11:51 AM
Hi all,
I'm starting a new thread because the issue has changed. I'm testing an app
that the software company claimes runs through SSL. I was able to install it
on IIS6 and I can connect via https. Every second or third screen it brings
up the warning box "this page contains secure and non-sec... more >>
Access Denied
Posted by Simon at 5/31/2004 8:47:14 AM
Hi,
I have Windows Server 2003 with IIS 6 and CMS 2002 for my
intranet. Everything was working well on my development
server. But now I try to put it on my production server,
and when I try to access the intranet, I get an ASP.NET
which basically tells that ASP.NET can't access IIS. A
c... more >>
Siteminder integeration problem with IIS
Posted by sumeet at 5/31/2004 6:11:01 AM
I configured Siteminder with IIS .When I am trying to run. I am getting the error
Unable to load SiteMinder host configuration object or host configuration file
C:\Program Files\Netegrity\SiteMinder Web Agent\Config\SmHost.conf
Please advice... more >>
New exploit?
Posted by google NO[at]SPAM gamestah.com at 5/31/2004 2:46:35 AM
Recently one of my IIS boxes got rooted - all active sites were
defaced and more importantly the hackers managed to get access to some
databases which reside above website's roots (eg: website root is at
c:\web\html, and the db resides in c:\web\data).
In the logs the following info:
cs-metho... more >>
Internet Options Lock
Posted by Bob Z at 5/30/2004 5:49:15 PM
After I downloaded and installed the Service Pack for
windows XP Home Addition, I found that I was unable to
change the Internet Options found under tools. I know
there must be a way of canceling this options lock but i
don't have any idea what to do. Do any of you?
Help if you can. It w... more >>
SPS wont use kerberos
Posted by Al Blake at 5/29/2004 8:25:25 PM
We have a windows2003 member server in a native AD domain that runs SPS2003
as well as a number of non-SPS IIS6 web sites.
We have managed to configure all the web sites *except* SPS2003 to use
kerberos as their preferred authentication - so we know kerberos is working
on the box.
We have fol... more >>
We ALL need to know
Posted by Joe at 5/29/2004 7:10:31 PM
There is a very vicious variant out there called Purity
Scan
I tried everthing there is to remove it but this was the
only way
http://www.purityscan.com/uninstall.html
Spybot and ad aware are useless against this.
Thank You, Joe... more >>
Pop Ups
Posted by Joe at 5/29/2004 4:40:31 PM
Hello,
I am in need of assistance here please.
I am getting popups on my server.I have run ad-aware and
Spyware blaster I have removed a few things they found but
I am getting more occasionally. I don't know where because
Ad aware is not finding them. I also see a pop up quickly
diappear... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
IIS Seperate Partition?
Posted by Ryan Riddell at 5/29/2004 4:01:04 PM
I'm running Server 03 with a web server and file server as well as acting as a domain controller
My question is if it would be more secure or considered a good idea to have the web server on its own partition
The idea being that if a malicious user manages to take control of IIS they are sort of... more >>
SSL on IIS6
Posted by cjobes at 5/29/2004 12:53:51 PM
Hi everyone,
I'm testing a new app on a standalone 2003. The website is mapped to a
single IP address that is only used by this website. The app works fine with
anonymous access. I want to use SSL for the sole purpose of encrypting
traffic. User authentication is done within the app.
I inst... more >>
ASP Files Error
Posted by Asif Attari at 5/29/2004 10:19:14 AM
When I run asp files using ordinary users (dont have
administrative rights, just members of Domain Users group)
its prompt me User, Password & Domain, when I put user's
info again which is login as interactively its not
accepted, or when I put user, password & domain who has
equal rights t... more >>
Raise error when requesting files..
Posted by Solle at 5/29/2004 8:56:01 AM
Just wondering if its possible to raise an error when requesting eg. a JPG file, just like requesting the global.asa
When requesting the global.asa you'll get the "HTTP Error 500-15 - Requests for global.asa not allowed" error ... and I would like something similar with the .JPG file...... more >>
IIS 5, SSL and multiple sites
Posted by Jeff C Greenville SC at 5/29/2004 6:33:52 AM
I've got a web server running IIS 5 with multiple sites.
I have given the box an IP address for each of two
different sites. We've installed two certificates, one
for each site. I've read the note 187504 in Microsoft's
knowledge base that says multiple certificates can't be
used because... more >>
IUSR Password
Posted by Asif Attari at 5/29/2004 5:53:12 AM
I have IIS 5 on w2k with sp4. Whats the default password
of IUSR. I am running IIS on Domain controller.... more >>
|