Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
all groups > iis security > may 2004 > threads for may 29 - 31, 2004

Filter by week: 1 2 3 4 5

Secure and non-secure message
Posted by cjobes at 5/31/2004 11:11:51 AM
Hi all, I'm starting a new thread because the issue has changed. I'm testing an app that the software company claimes runs through SSL. I was able to install it on IIS6 and I can connect via https. Every second or third screen it brings up the warning box "this page contains secure and non-sec...more >>


Access Denied
Posted by Simon at 5/31/2004 8:47:14 AM
Hi, I have Windows Server 2003 with IIS 6 and CMS 2002 for my intranet. Everything was working well on my development server. But now I try to put it on my production server, and when I try to access the intranet, I get an ASP.NET which basically tells that ASP.NET can't access IIS. A c...more >>

Siteminder integeration problem with IIS
Posted by sumeet at 5/31/2004 6:11:01 AM
I configured Siteminder with IIS .When I am trying to run. I am getting the error Unable to load SiteMinder host configuration object or host configuration file C:\Program Files\Netegrity\SiteMinder Web Agent\Config\SmHost.conf Please advice...more >>

New exploit?
Posted by google NO[at]SPAM gamestah.com at 5/31/2004 2:46:35 AM
Recently one of my IIS boxes got rooted - all active sites were defaced and more importantly the hackers managed to get access to some databases which reside above website's roots (eg: website root is at c:\web\html, and the db resides in c:\web\data). In the logs the following info: cs-metho...more >>

Internet Options Lock
Posted by Bob Z at 5/30/2004 5:49:15 PM
After I downloaded and installed the Service Pack for windows XP Home Addition, I found that I was unable to change the Internet Options found under tools. I know there must be a way of canceling this options lock but i don't have any idea what to do. Do any of you? Help if you can. It w...more >>

SPS wont use kerberos
Posted by Al Blake at 5/29/2004 8:25:25 PM
We have a windows2003 member server in a native AD domain that runs SPS2003 as well as a number of non-SPS IIS6 web sites. We have managed to configure all the web sites *except* SPS2003 to use kerberos as their preferred authentication - so we know kerberos is working on the box. We have fol...more >>

We ALL need to know
Posted by Joe at 5/29/2004 7:10:31 PM
There is a very vicious variant out there called Purity Scan I tried everthing there is to remove it but this was the only way http://www.purityscan.com/uninstall.html Spybot and ad aware are useless against this. Thank You, Joe...more >>

Pop Ups
Posted by Joe at 5/29/2004 4:40:31 PM
Hello, I am in need of assistance here please. I am getting popups on my server.I have run ad-aware and Spyware blaster I have removed a few things they found but I am getting more occasionally. I don't know where because Ad aware is not finding them. I also see a pop up quickly diappear...more >>



IIS Seperate Partition?
Posted by Ryan Riddell at 5/29/2004 4:01:04 PM
I'm running Server 03 with a web server and file server as well as acting as a domain controller My question is if it would be more secure or considered a good idea to have the web server on its own partition The idea being that if a malicious user manages to take control of IIS they are sort of...more >>

SSL on IIS6
Posted by cjobes at 5/29/2004 12:53:51 PM
Hi everyone, I'm testing a new app on a standalone 2003. The website is mapped to a single IP address that is only used by this website. The app works fine with anonymous access. I want to use SSL for the sole purpose of encrypting traffic. User authentication is done within the app. I inst...more >>

ASP Files Error
Posted by Asif Attari at 5/29/2004 10:19:14 AM
When I run asp files using ordinary users (dont have administrative rights, just members of Domain Users group) its prompt me User, Password & Domain, when I put user's info again which is login as interactively its not accepted, or when I put user, password & domain who has equal rights t...more >>

Raise error when requesting files..
Posted by Solle at 5/29/2004 8:56:01 AM
Just wondering if its possible to raise an error when requesting eg. a JPG file, just like requesting the global.asa When requesting the global.asa you'll get the "HTTP Error 500-15 - Requests for global.asa not allowed" error ... and I would like something similar with the .JPG file......more >>

IIS 5, SSL and multiple sites
Posted by Jeff C Greenville SC at 5/29/2004 6:33:52 AM
I've got a web server running IIS 5 with multiple sites. I have given the box an IP address for each of two different sites. We've installed two certificates, one for each site. I've read the note 187504 in Microsoft's knowledge base that says multiple certificates can't be used because...more >>

IUSR Password
Posted by Asif Attari at 5/29/2004 5:53:12 AM
I have IIS 5 on w2k with sp4. Whats the default password of IUSR. I am running IIS on Domain controller....more >>


DevelopmentNow Blog