Psst! Did you know DevelopmentNow is a mobile web site design agency?

Contact us for help mobilizing your site, or to sign up for our beta Mobile Web SDK!


Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > iis security > june 2004

Filter by week: 1 2 3 4 5

RPSL format
Posted by Jasmin at 6/30/2004 11:57:17 PM
Hi, some "H" coming to my computer. He useing RPSL format (RIPE Server). How con Blocked Him??? i have Sygate Personal Firewall - but this is no uase? Jasmin ...more >>


Internet explorer problem
Posted by justhefacs at 6/30/2004 7:32:53 PM
I'm not sure I'm even in the right place to ask this...but here goes...when I load the internet explorer, some type of ad/search (http://bestsearch.cc/1001/) takes over the home page. Even when I change it...it goes back when I reboot. How do I get rid of this??? any ideas?? ...more >>

Secure Password
Posted by Ricardo at 6/30/2004 3:48:01 PM
I have a IIS 5.0 with a FTP site. When users connect to the FTP site is required a password to gain access to the folders. But I know that this user password is sent in clear text to the server. Is there a way to encrypt it to improve secure on my FTP site ?...more >>

Create a second certificate
Posted by Dave at 6/30/2004 3:45:03 PM
I want to create a second certificate for a website. I have an internal certificate for my internal users, but now I want to put a Verisign Certificate on that site for my external users. Is this possible?...more >>

Event ID 2266 error
Posted by Lorenzo Pena at 6/30/2004 2:17:09 PM
I have a new IIS 6.0 web server running in Worker Process Isolation Mode. There are about 150 ASP apps distributed among 12 application pools. I keep getting the following error in the Application log. Source: W3SVC-WP Event Id: 2266 Type: Warning User: n/a Description...more >>

password displayed in IIS log
Posted by Kazama718 at 6/30/2004 1:45:01 PM
I'm using an asp page to collect logon informations (user name and password) to gain access into my system. When I was looking through the IIS log, I've noticed that it recorded the user name and password in the log. This happens using IIS 5.0 Windows 2000. When I use II 6.0 on Windows 2003, I do...more >>

iis6 - shared folder - virtual dir: can't request .exe program???
Posted by Reinold Beyer at 6/30/2004 12:45:10 PM
hi out there! we are having a strange thing here: we use win2003 with iis6 and have a shared folder to a win2000 machine. this shared folder is made a virtual directory under our website. in this folder we have a self extracting .zip file as .exe. when requesting this file the server thro...more >>

IIS6 NTLM Authenication
Posted by DavidM at 6/30/2004 10:37:25 AM
Hello, I have an directory on my W2K/II6 webserver that I want to prompt users for a valid local NT username/password before the page is displayed. The webpage is an ASP page. I thought I knew how to do this, but for some reason, it only works with an Administrator account. 1) I removed all...more >>



Suggestions for utils to stop file changes on IIS server
Posted by nospamjunketc NO[at]SPAM earthlink.net at 6/30/2004 9:33:46 AM
The server is running IIS 6.0, has the WS2k3 f/w enabled and is protected by an SPI firewall, however, I'm still a bit paranoid. Anyone have good recommendations for reliable enterprise-class programs that can wrap another layer around the OS and let me know if/when files are changed or simply...more >>

Am I hacked? IIS dying, 'telnet localhost 443' gives: Hallo, Willkommen auf Compactzone Stro!
Posted by hal NO[at]SPAM nospam.com at 6/30/2004 8:00:27 AM
I posted yesterday about my IIS dying. Original post is below. General consensus and mosts docs on the 115 error say something is listening on my http/https ports, however, netstat does not show anything. I am checking into third party utilities to get more info, but I found something very dis...more >>

NIS
Posted by Quentin Smith at 6/30/2004 5:14:36 AM
Would anyone have information on windows NIS....more >>

Microsoft Speech Server IIS6 error 401
Posted by Dave at 6/29/2004 6:09:01 PM
We have reached the final stage of our MS Speech Server implementation and even with the help from our reseller and consultants we can't seem to go any further due to an authorization issue in the SES in an 2003 Enterprise Server Domain environment. There are two files to configure, access.txt and ...more >>

IIS dies on startup with Event ID 115
Posted by hal NO[at]SPAM nospam.com at 6/29/2004 2:46:10 PM
Something happened to my Exchange server over the weekend that caused a crash (nothing logged) and upon startup my IIS is failing with Event ID 115 (Service could not bind instance 1). This error is logged for both MSFTPSVC and W3SVC. All services seem to be running but OWA access to either p...more >>

mstask.exe
Posted by Brian at 6/29/2004 2:19:00 PM
We are running a w2k webserver, everytime the server is rebooted mstask.exe runs on port 80 which will not allow the website to restart. I have to us a tcp viewer and end the process of mstask.exe. I can't see what is calling mstask on start up to run on port 80. Any suggestions? ...more >>

various problems
Posted by Jim at 6/29/2004 9:35:37 AM
I have 3 issues that I need help with. I am currently using Windows ME. 1) I get notices of updates available, but they will not completely load. What am I doing wrong? 2) After completing a thorough ScanDisc and Defrag, I found that I had program names down in the TASK BAR. I clicked on "...more >>

Cerfiticate request not found.
Posted by technical NO[at]SPAM news.postalias at 6/29/2004 7:32:40 AM
We have an exchange server running IIS5 with a certificte about to expire. I went through the options to create a renewal request. I sent the request to a CA and obtained the response. When i try to process the pending request, I get the message "The pending certificate request for this r...more >>

Can't make a domain user the "anonymous access" user
Posted by Jen Roth at 6/28/2004 1:51:14 PM
I have been trying to set up a website in IIS 6 so that a domain user account is used for anonymous access, instead of IUSR_SERVERNAME. (I am doing this because we have ASP scripts that need to connect to a datasource as this domain user.) Unfortunately, it doesn't work. I can set it up so t...more >>

Using IPSec to connect to a virtual folder on another PC on a different network
Posted by Rob Skinner at 6/28/2004 1:45:21 PM
I have a Windows 2000 Server running IIS 5.0 out in the DMZ of my Cisco firewall using IP 10.1.1.X. One of the websites on this server connects to a virtual directory which is located on a Windows 2000 Professional PC on the corporate secured LAN at 10.0.0.X. My ISP (they are configuring my...more >>

Does SSL encrypt the data from client to server and back
Posted by jeroenlauwers NO[at]SPAM hotmail.com at 6/28/2004 12:33:33 PM
If one only installs a certificate at server side, is all data transfered between client (browser without certificate) and server encrypted ?...more >>

How do I block unauthorized insertion of a default home page?
Posted by kp at 6/28/2004 12:10:53 PM
Every time I get onto the internet I find that my default home page has been adjusted from www.msn.com to "res://iglqz.dll/index.html#96676" I go into Tools and Internet Options and change it back to msn.com but during the next web event it is again changed back to "res://iglqz.dll/index....more >>

help: site hacked
Posted by HernĂ¡n_Castelo at 6/28/2004 11:03:54 AM
hi someone was hacked my site i have 2 servers : web--> IIS 5 / w2k adv Srv IIS lockdown sql--> SQL2k / w2k adv Srv i found the web srv doing "beeps" soon i found it serves html pages but don't serves asp with an error like "Error in the server application" sql srv lost sa password and...more >>

Cert requests Server 2003
Posted by Joe at 6/28/2004 9:51:27 AM
Hello, I have recently installed the stand alone CA in server 2003 Enterprise. I have been able to receive a request via the webserver https://servername/certsrv in IIS 6.0 and I issued the cert. I also was able to download the cert to a remote machine XP Pro via the internet. But I can...more >>

Allow verbs
Posted by JT at 6/28/2004 7:46:55 AM
Which verbs should I allow in URLScan for a static WEB site that does have a feedback page. Is there any place to find an explanation of allow verbs? Thanks...more >>

404.2 error clicking a link to download a file
Posted by chris.paus NO[at]SPAM orametrix.com at 6/28/2004 7:18:41 AM
We have a website that is set up to allow our employees to click a link to a .exe file to download and install a client application. It works fine under Windows 2000 Server and IIS 5.0 But on the new server running Server 2003 and IIS 6.0 the users get an error: HTTP Error 404 - File or ...more >>

No Internet Connection Firewall in windows 2003 standard
Posted by John at 6/28/2004 6:42:20 AM
How do i install this or is it missing from this release...more >>

iis5.log
Posted by Mike at 6/28/2004 6:32:42 AM
Hi, Noticed that I had a log for the iis5.log and was wondering why that would be. I do not have the services started and for some reason it seems to be active on occasion while looking at the file. Does anyone know if this could mean that the PC is comprimised? Thanks Mike...more >>

Disable Printing from the internet
Posted by Finnie B. at 6/28/2004 3:49:57 AM
Can someone please help me. I am a Photographer and I post photos on my website. I need to know how to disable all viewers from being able to print off of the internet. Although, I place my copyright stamp on the picture and reduce the resolution on 'em so that if they are printed it looks ...more >>

Can't get SSL to work locally
Posted by Mark Rae at 6/27/2004 1:40:10 PM
Hi, I've recently acquired an SSL certificate on my live web site which I maintain and develop in C# / ASP.NET with VS.NET 2003. That means I can use https://www.markrae.co.uk just as well as http://www.markrae.co.uk. Therefore, I need to be able to simulate this on my development machine. ...more >>

unable to delete program
Posted by Raquel at 6/27/2004 8:07:43 AM
I have a strange program listed in my C drive. I am unable to delete it. When I try, I get an error message that says it has to shutdown the program. Then it takes me back to my desktop page. The program remains!! ...more >>

Windows 2003 server in DMZ for websites
Posted by bits on glass at 6/26/2004 11:22:47 PM
I have a Windows SBS 2003 behind a PIX firewall with several clients behind the SBS. I want to place a Windows 2003 server in the DMZ to host a couple of external sites. I have enough static IPs to support the site. I am searching for a good resource to answer several questions related to managi...more >>

deleting addresses on internet browser
Posted by jason at 6/26/2004 12:24:36 PM
how do i remove addresses from my menu bar? ...more >>

HTTP 403.6 error message
Posted by Joyce E. Nelson at 6/26/2004 11:05:04 AM
Web site www.riograndeair rejects my IP address...more >>

Testing security
Posted by Mike at 6/25/2004 4:36:44 PM
Hi, Is there any tools out there that would test your server for any security holes or weakness. How would one go about to test their server again possible hackers. Thanks Rick...more >>

Server got hacked. Help please.
Posted by Mike at 6/25/2004 1:07:16 PM
Hello, This week we got a call from our security guys informing us that the web server got hacked. Upon investigation, I've found compressed MP3 files that were distributed from this server. Security guys informed me that the break-in was probably done using MS FrontPage extension hack...more >>

Can't get to SSL site
Posted by Mike Plagge at 6/25/2004 12:47:05 PM
We've got SSL set up on our exchange server with the exchange server set up as the CA. We've set up IIS to use SSL on port 443. We've checked to make sure the the exchange server is listening on port 443. Whenever we try to get to OWA (or any page in the default website) using SSL, we get a pag...more >>

Users cannot download files from site
Posted by Jake at 6/25/2004 7:00:48 AM
Hello, We just converted our site to IIS6 from IIS5 or win2k to win2k3. Now none of the users can download .exe files or any .bpf files. If we type in the url http://www.mysite.com/virtualdirectory/updates/filename.bpf we get a 404 error. Is there some setting in IIS6 that needs to be set to...more >>

how to work asp.net as local user
Posted by jeeve at 6/25/2004 12:30:04 AM
hai i want to allow local windows user to work on asp.net? but now i am working only by using the administrator account. please send me the deatils about how to overcome the above as quick as possible. thanks...more >>

problems accessing database
Posted by John at 6/25/2004 12:05:03 AM
I have installed a Windows2000 server with several accounts and developed a Paradox 7 database. The database is accessable an intranet. The webserver is the microsoft IIS and CGI software developped with Borland Delphi 5.0!! When I try to login it starts the program correct but when I sele...more >>

Website allows everyone in, not matter what
Posted by Tom Pennington at 6/24/2004 7:53:28 PM
Okay, I have created a web site that is open to the public, yet there are pieces that need username/passwords to be able to get in, at least I thought. NTFS Permissions are set so that only members of a particular group can get to this directory, IIS Admin has this directory set to not allow A...more >>

How to setup HTTPS
Posted by Philip at 6/24/2004 11:27:36 AM
I have Windows 2000 Server and Exhcange 2000 Server. How do I enable HTTPS for Exchang Web access? Thanks! Philip...more >>

IE6
Posted by Kiuna at 6/24/2004 8:00:10 AM
What causes run time error in IE6 and what's the fix?...more >>

IIS virtual directory access permission
Posted by Raymond at 6/24/2004 3:40:21 AM
Hi, I want to allow specific windows users accessing a virtual directory and deny all other users. Is it possible? Thanks for your help!...more >>

IIS 6 on Win 2003 hardening query?
Posted by Sunil Vakharia at 6/24/2004 3:30:01 AM
Hi, For IIS 5 hardening, the following are some of the registry keys to be set: HKLM\System\CurrentControlSet\Services\HTTP\Parameters AllowRestrictedChars == 0 MaxFieldLength == 16384 bytes UrlSegmentMaxLength == 260 UrlSegmentMaxCount == 255 ---------------------------------------------...more >>

Login failed for user '(null)'
Posted by haltenberg NO[at]SPAM yahoo.com at 6/24/2004 3:21:48 AM
I am running a third-party web application (mainly ASP and specific pages with their own extension that are processed by a third-party ISAPI dll) on a Windows 2000 Server (IIS 5.0) which is also a domain controller and has MS SQL 2000 installed. Anonymous access in IIS for this application is se...more >>

LogParser's XML Output contains linefeed characters
Posted by Craig Dunstan at 6/23/2004 11:07:11 PM
I am using LogParser 2.1 and sending the output to XML so I can review the results. Unfortunately, it appears as though LogParser (or perhaps the underlying log) is generating a linefeed character (0x0A) and two spaces after the contents of each element value. Any ideas how to remove any...more >>

Why IIS requires login dialog?
Posted by Lei Jiang at 6/23/2004 8:55:26 PM
When I access a web site on my machine, such as http://localhost/MyWebSite, a dialog appears ask me to input username and password. Only after I input my windows login name and password could I enter the site. How could I solve this problem? My environment is : Windows 2003 Enterpries Edi...more >>

Impersonating a specific thread
Posted by Tony Proctor at 6/23/2004 7:16:28 PM
I need a little help with getting an IIS thread (well, actually a DLLHOST one) to impersonate the same account as another thread is doing. My situation is as follows: our application involves a VB6 component. This accepts a number of special "admin" requests which have to be synchronised and m...more >>

website ask for ID and password???????
Posted by Need help!!!!! at 6/23/2004 5:25:09 PM
Why is my website that should be open to the world is asking for a userID and password? How do I stop the website from asking for a userID and password? I have a 2k3 server running IIS6. Thanks!!!!! ...more >>

Problem with Mapping Certificate to User account
Posted by Mike Seising at 6/23/2004 5:24:33 PM
Hi, I'm using IIS 6.0 on Windows 2003 server. I have created a simple web site that I have secured by requiring SSL and trying to map a client certificate to a user account using IIS Mapping. The user account I'm mapping a certificate to is a local user account on the Server - the server is...more >>

Webserver accessing Active Directory information
Posted by Toddah at 6/23/2004 2:44:34 PM
I have a 3 leg PIX 515 with Inside (full AD), DMZ and outside(internet) interfaces. I have a (workgroup) 2003 Server with IIS6 running a website in the DMZ. I have allowed 1433 thru the firewall to talk to the inside SQL server and that works fine. Our programmer has developed an ASP appli...more >>


DevelopmentNow Blog