I have been trying to set up a website in IIS 6 so that a domain user account is used for anonymous access, instead of IUSR_SERVERNAME. (I am doing this because we have ASP scripts that need to connect to a datasource as this domain user.) Unfortunately, it doesn't work. I can set it up so t...more >>

I have a Windows 2000 Server running IIS 5.0 out in the DMZ of my Cisco firewall using IP 10.1.1.X. One of the websites on this server connects to a virtual directory which is located on a Windows 2000 Professional PC on the corporate secured LAN at 10.0.0.X. My ISP (they are configuring my...more >>

If one only installs a certificate at server side, is all data transfered between client (browser without certificate) and server encrypted ?...more >>

Every time I get onto the internet I find that my default home page has been adjusted from www.msn.com to "res://iglqz.dll/index.html#96676" I go into Tools and Internet Options and change it back to msn.com but during the next web event it is again changed back to "res://iglqz.dll/index....more >>

hi someone was hacked my site i have 2 servers : web--> IIS 5 / w2k adv Srv IIS lockdown sql--> SQL2k / w2k adv Srv i found the web srv doing "beeps" soon i found it serves html pages but don't serves asp with an error like "Error in the server application" sql srv lost sa password and...more >>

Hello, I have recently installed the stand alone CA in server 2003 Enterprise. I have been able to receive a request via the webserver https://servername/certsrv in IIS 6.0 and I issued the cert. I also was able to download the cert to a remote machine XP Pro via the internet. But I can...more >>

Which verbs should I allow in URLScan for a static WEB site that does have a feedback page. Is there any place to find an explanation of allow verbs? Thanks...more >>

We have a website that is set up to allow our employees to click a link to a .exe file to download and install a client application. It works fine under Windows 2000 Server and IIS 5.0 But on the new server running Server 2003 and IIS 6.0 the users get an error: HTTP Error 404 - File or ...more >>

How do i install this or is it missing from this release...more >>

Hi, Noticed that I had a log for the iis5.log and was wondering why that would be. I do not have the services started and for some reason it seems to be active on occasion while looking at the file. Does anyone know if this could mean that the PC is comprimised? Thanks Mike...more >>

Can someone please help me. I am a Photographer and I post photos on my website. I need to know how to disable all viewers from being able to print off of the internet. Although, I place my copyright stamp on the picture and reduce the resolution on 'em so that if they are printed it looks ...more >>

Hi, I've recently acquired an SSL certificate on my live web site which I maintain and develop in C# / ASP.NET with VS.NET 2003. That means I can use https://www.markrae.co.uk just as well as http://www.markrae.co.uk. Therefore, I need to be able to simulate this on my development machine. ...more >>

I have a strange program listed in my C drive. I am unable to delete it. When I try, I get an error message that says it has to shutdown the program. Then it takes me back to my desktop page. The program remains!! ...more >>

I have a Windows SBS 2003 behind a PIX firewall with several clients behind the SBS. I want to place a Windows 2003 server in the DMZ to host a couple of external sites. I have enough static IPs to support the site. I am searching for a good resource to answer several questions related to managi...more >>

how do i remove addresses from my menu bar? ...more >>

Web site www.riograndeair rejects my IP address...more >>

Hi, Is there any tools out there that would test your server for any security holes or weakness. How would one go about to test their server again possible hackers. Thanks Rick...more >>

Hello, This week we got a call from our security guys informing us that the web server got hacked. Upon investigation, I've found compressed MP3 files that were distributed from this server. Security guys informed me that the break-in was probably done using MS FrontPage extension hack...more >>

We've got SSL set up on our exchange server with the exchange server set up as the CA. We've set up IIS to use SSL on port 443. We've checked to make sure the the exchange server is listening on port 443. Whenever we try to get to OWA (or any page in the default website) using SSL, we get a pag...more >>

Hello, We just converted our site to IIS6 from IIS5 or win2k to win2k3. Now none of the users can download .exe files or any .bpf files. If we type in the url http://www.mysite.com/virtualdirectory/updates/filename.bpf we get a 404 error. Is there some setting in IIS6 that needs to be set to...more >>

hai i want to allow local windows user to work on asp.net? but now i am working only by using the administrator account. please send me the deatils about how to overcome the above as quick as possible. thanks...more >>

I have installed a Windows2000 server with several accounts and developed a Paradox 7 database. The database is accessable an intranet. The webserver is the microsoft IIS and CGI software developped with Borland Delphi 5.0!! When I try to login it starts the program correct but when I sele...more >>

Okay, I have created a web site that is open to the public, yet there are pieces that need username/passwords to be able to get in, at least I thought. NTFS Permissions are set so that only members of a particular group can get to this directory, IIS Admin has this directory set to not allow A...more >>

I have Windows 2000 Server and Exhcange 2000 Server. How do I enable HTTPS for Exchang Web access? Thanks! Philip...more >>

What causes run time error in IE6 and what's the fix?...more >>

Hi, I want to allow specific windows users accessing a virtual directory and deny all other users. Is it possible? Thanks for your help!...more >>

Hi, For IIS 5 hardening, the following are some of the registry keys to be set: HKLM\System\CurrentControlSet\Services\HTTP\Parameters AllowRestrictedChars == 0 MaxFieldLength == 16384 bytes UrlSegmentMaxLength == 260 UrlSegmentMaxCount == 255 ---------------------------------------------...more >>

I am running a third-party web application (mainly ASP and specific pages with their own extension that are processed by a third-party ISAPI dll) on a Windows 2000 Server (IIS 5.0) which is also a domain controller and has MS SQL 2000 installed. Anonymous access in IIS for this application is se...more >>

I am using LogParser 2.1 and sending the output to XML so I can review the results. Unfortunately, it appears as though LogParser (or perhaps the underlying log) is generating a linefeed character (0x0A) and two spaces after the contents of each element value. Any ideas how to remove any...more >>

When I access a web site on my machine, such as http://localhost/MyWebSite, a dialog appears ask me to input username and password. Only after I input my windows login name and password could I enter the site. How could I solve this problem? My environment is : Windows 2003 Enterpries Edi...more >>

I need a little help with getting an IIS thread (well, actually a DLLHOST one) to impersonate the same account as another thread is doing. My situation is as follows: our application involves a VB6 component. This accepts a number of special "admin" requests which have to be synchronised and m...more >>

Why is my website that should be open to the world is asking for a userID and password? How do I stop the website from asking for a userID and password? I have a 2k3 server running IIS6. Thanks!!!!! ...more >>

Hi, I'm using IIS 6.0 on Windows 2003 server. I have created a simple web site that I have secured by requiring SSL and trying to map a client certificate to a user account using IIS Mapping. The user account I'm mapping a certificate to is a local user account on the Server - the server is...more >>

I have a 3 leg PIX 515 with Inside (full AD), DMZ and outside(internet) interfaces. I have a (workgroup) 2003 Server with IIS6 running a website in the DMZ. I have allowed 1433 thru the firewall to talk to the inside SQL server and that works fine. Our programmer has developed an ASP appli...more >>

On June 19 I upgraded to Windows 2003. Since then previously running/working apps no longer work. One is Outlook Web Access (OWA) I am getting a 503 Service Unavailable error. The other is the web interface for my Exchange Antivirus software. Both interfaces do not work. I have gone through sev...more >>

I am a web designer and have a client who needs for a number of reason to host his own site. The client has a small P2P network however the website will potentially receive a fair bit of traffic. I can organise for a third party to direct the domain name to their IP address. Should I simply se...more >>

Any suggestion as to how to get rid of Zestyfind hijackers sites as well as a host of "pc security' hijackers that pop up unwantedly....highjack this..adaware...spybot as well as the standard MS security suggestion have not worked....more >>

Hi, I have set up ISS on my computer, to test webpages i make. On my former setup, I ran Win 2000 Pro SP4 with office 2000, and all was working smoothly. Now I am running Win XP SP1 with office 2003, and only plain html-pages show up, not .asp-pages, which I mainly use (using Access-mdb ...more >>

I successfully removed some malicious code from my IIS 5.0 server that may not have had all it's patches updated, but I cannot find any information on this malicious code that redirected on a random basis the users of my websites to a russian website that appeared to be down. to a domain called bala...more >>

I have an asp page that uses the FileSystemObject to retrieve folder structure information on a virtual directory located in the inetpub/wwwroot folder on a Windows XP pro box. I've verified that the code is correct on another machine, but when executed on the win xp pro box, the asp page just ...more >>

I installed IIS, In a LAN environment, for a work station. localhost does not work! when i do ping IP address from command line, I can see reply from work startion BUT when I put IP address in address bar, there is no respond! what is the different between them? I just need a hint to solve...more >>

We are planning to deploy exch2k, i want the inetpub to reside on x:\new-inetpub-name, while making sure that IIS still works properly to run Exch2k. I look at mskb that show how to move the www and ftp, but it doesnt mention anything about the smtp and nntp, which exch2k needs....more >>

I'm trying to export the CSR to renew our certificate, but i'm getting an error from Windows. In the IIS Certificate Wizard window, it tells me 'Failed to Generate the Certificate Request. An internal error occured'. ...more >>