Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008


all groups > iis security > june 2004 > threads for june 8 - 14, 2004

Filter by week: 1 2 3 4 5

Connecting to localhost
Posted by Michelle at 6/14/2004 7:15:15 PM
I am trying to use my IIS server on Windows XP Pro, but when I try go create a server-based web in FrontPage on either localhost or 127.0.0.1, or open the ColdFusion Administrator (web-based program) on my PC, I receive a Connecting to Local Host dialog box that asks for my default_realm U...more >>

IIS and Perl
Posted by Dhiraj at 6/14/2004 3:01:01 PM
I am trying to run sample code from Microsoft to configure Smartphone. When I run the perl code, I get error "can not spawn cmd.exe." I am using IIS 5.0 and Activestate Perl. Also from the perl code I can not write to directories under wwwroot. If I try to write to c:\\temp it works fine. PLEASE H...more >>

test2
Posted by chadmscom at 6/14/2004 2:02:01 PM
test...more >>

IIS bypassing NTFS Security
Posted by Ishmealm at 6/14/2004 1:53:01 PM
Hi, I have a website that has basic authenication and SSL enabled, anonymous has been turned off. The site points to a folder. On that folder I have a group that is denied access. The group is for non-employees, it it my intention to deny all contractors access to this folder. I am a cont...more >>

403 Error when accessing SUS
Posted by Terry at 6/14/2004 11:52:01 AM
I have installed SUS 1.0 w/SP1. I am trying to access the SUSAdmin. When i try to do this I am getting the 403 forbidden error. http://servername/susadmin If I try to gain access to other websites on this server, everything works fine. It's only when trying to access SUS does it give the ...more >>

MS Access on IIS 5.0
Posted by Robin at 6/14/2004 10:12:51 AM
I have 3 MS Access databases running on IIS 5.0. 1 Is for internal use only while the other 2 are used to display postings and have users submit information via PHP pages. What is the best way to restrict access to these databases? Either within MS Access, IIS or NTFS file and folder ...more >>

How to install website certificate as Trusted?
Posted by Tony Su at 6/14/2004 8:47:34 AM
Specifically I'm referring to SBS2K3, but should probably be applicable to any other situation where a website is secured with a Makecert or is issued by a CA not already trusted. When a User views the suspect certificate, clicks on "View Certificate" and "Install Certificate," whether th...more >>

filter Ip bandwidth to IIS6 server
Posted by mbelton at 6/14/2004 7:50:08 AM
I would like to limit the bandwidth to a particular website. BUT, I want to limit by IP addresses. I know I can easily limit the entire sites badnwidth but then one IP could essentially use all the available bandwidth. I want to limit the amount of bandwidth or connections or connecti...more >>



Uuser Access to Run IIS
Posted by jen at 6/14/2004 5:15:34 AM
How can you get a regular domain user to run IIS when they are not, and cannot be a memebr of the Administrators group. Thanks....more >>

I_USR requires Logon type 3 - Help!
Posted by sechead at 6/13/2004 11:09:18 PM
Problem: When IUSR tries to logon to the FTP server, the attempt is unsuccessful. Errors are logged in the Event Viewer Security and System logs. Configuration: Windows XP Pro Service Pack 2 beta IIS 5.1 IIS Lockdown Local Security Settings -> User Rights Assignm...more >>

Setting SSL on IIS6
Posted by brad NO[at]SPAM eznetideas.com at 6/13/2004 2:51:05 PM
I purchased a SSL and trying to install it on IIS6. I have a dedicated IP Address that will use this SSL. I can go into the website properties and click on the 'Directory Security' tab and click 'View Certificate' and see the certificate just fine. Here are the settings I have... Description:...more >>

unwanted search toolbar on explorer
Posted by paul James at 6/13/2004 2:41:57 PM
A search toolbar (IST search) appeared on my explorer and I can't get rid of it. I tried to uninstall explorer but it will not leave the machine. I tried to install over it but i get the message that i can install over an existing copy. I am using Netscape right now but I still need to get this ...more >>

makecert: why only test certificates?
Posted by Martin M at 6/13/2004 2:06:10 PM
I wonder why microsoft states that makecert creates only test certificates. Is this just for legal reasons (i.e. because I am not a trusted CA) or is this for technical reasons? As I understand a certificate needs a number which is the product of two very large primes (about 100 digits). It...more >>

No internet pages can be opened
Posted by Kino at 6/13/2004 4:25:01 AM
The problem is every time I try to log on to the internet " The page cannot be found" pops up. Is this a virus ? how can this be resolved?...more >>

Know MTX.EXE leak?
Posted by Bitoy at 6/12/2004 3:29:08 PM
Is there any know MTX.EXE memory leak and if there's any readily patch available? I'm running IIS4.0. Ty in advance. -Bitz -----= Posted via Newsfeeds.Com, Uncensored Usenet News =----- http://www.newsfeeds.com - The #1 Newsgroup Service in the World! -----== Over 100,000 Newsgroups ...more >>

java msg
Posted by wayne at 6/12/2004 9:13:05 AM
hs_err_pid232 - Note ....Can anyone give me information on this page as to whether it is a security risk or as to its purpose...more >>

how to block pop ups
Posted by chris at 6/11/2004 11:05:42 PM
I am being plagued by about 4 pop ups every minute,; adware, spyware, when u search taking over my browser, multiple companies ad pop ups constantly, plus i am runnin g half speed alot. I am not very tech savy, any clear help would be great. I am running internet explorer windows xp...more >>

SSL Cert. Creation
Posted by Joe at 6/11/2004 7:21:11 PM
Hello, I am wondering if you can create your own trusted certificate in Windows Server 2003 Enterprise to use on the internet? Thank you Joe...more >>

explorer homepage problems
Posted by anonymous NO[at]SPAM discussions.microsoft.com at 6/11/2004 3:52:42 PM
ok...my home page on explorer keeps changing even though i have all ready sellected a different page i need to know why is changes and gives me a useless pop-up page...more >>

ActiveX - local computer
Posted by Mikie at 6/11/2004 10:19:47 AM
I have an ActiveX control I want to be used on just a local computer. I keep getting the security popup. Is there anyway to eliminate the popup? Thanx...more >>

II6.0 logon box
Posted by Kevin Wheeler at 6/11/2004 9:05:43 AM
Can anyone tell me what setting controls if a web user is prompted for username and password or not? I have the default iis6.0 setup and when I open web pages, it prompts me for a user name and password. Kevin ...more >>

Server object error 'ASP 0178 : 80070005'
Posted by Kevin Wheeler at 6/11/2004 9:03:27 AM
Can anyone help me with this error? I'm running w2k3 IIS 6.0 Creating WmsCmdf.cmdf... Server object error 'ASP 0178 : 80070005' Server.CreateObject Access Error /Wms/USSample/createCMDF.asp, line 59 The call to Server.CreateObject failed while checking permissions. Access is denied ...more >>

Virus?
Posted by Figgy at 6/10/2004 9:54:03 PM
my daughter's computer keeps shuting down everytime she tries to go on line. A timer appears counting down to zero and then shuts down.Please tell me what can I do? ...more >>

External Access to IIS via Kerberos Authentication
Posted by mike_eeee NO[at]SPAM hotmail.com at 6/10/2004 9:05:49 PM
Hello all! I'm having a heck of a time with a file folder share on IIS6.0. - I have a IIS server (IISWEB) running a website with "iisweb.domain.com" and "iisweb" as its headers. - This website is using "a share located on another computer" as its home directory. - The server has been trust...more >>

HTTP 405: The HTTP verb used to access this page is not allowed
Posted by rblackma at 6/10/2004 7:36:01 PM
I added a a second website to my IIS server to host, then created another account in exchange for the webmaster account pointing from the second website. All was well until I tried to log into my exchange webmail. I get the login screen, I log n and immediately get the above error. HTTP 405: The HTT...more >>

system32
Posted by ryeguy at 6/10/2004 4:38:01 PM
this folder(System32)keeps popping up? why?...more >>

SSL for Encryption
Posted by Harry Simpson at 6/10/2004 2:51:53 PM
We want to provide SSL for our ASP.NET web app, primarily for the encryption of data sent from the client back to the server. The server is just a server within the office domain with an intranet type IP like 10.0.0.104 or something. No www.domainname.com type domain name. I want to turn IIS...more >>

Help! "you are not authorized to view this page"
Posted by Senormic at 6/10/2004 2:16:01 PM
I keep getting this message when I try to right click and browse on my Virtual directory. However, when I right click and choose browse on the file I want to display within the details pane of my Virtual Directory, it displays. Can anyone tell me where I can look to set the permissions that I am ...more >>

cannot save file to a web folder iis 60
Posted by skg at 6/10/2004 1:16:01 PM
I need to be able to create and save files to a web folder. If I use new text doc I get access denied. If I use notepad creates file it says I don't have permission to save to this directory. I need to use web folders for an application that creates and deletes lock files, and user can change fil...more >>

OWA on SBS2003 Standard works internally, doesn't render properly from outside
Posted by Lanwench [MVP - Exchange] at 6/10/2004 12:57:06 PM
Hi all - getting my feet wet with SBS (2003 Standard) for the first time (well, except for a long-ago bad experience with SBS4.x, but my therapist says it's OK for me not to discuss that anymore & just move on with life). This server was installed from scratch about two weeks ago (no migration,...more >>

Windows Authentication
Posted by Gorge Bush at 6/10/2004 12:32:13 PM
Hi there, in the IIS help it states "Integrated Windows authentication is best suited for an intranet environment". Does this mean that it will not work over the internet or that there are potential problems? ...more >>

Allow Perl on IIS 6 on Windows 2003
Posted by Pete Robbins at 6/10/2004 11:46:05 AM
I've just added a Windows 2003 Server and according to ActiveState "Perl CGI is set to Prohibited by default and must be explicitly changed to Allow in the IIS Manager. They have great instructions for doing this located at: http://aspn.activestate.com/ASPN/docs/ActivePerl/faq/Windows/ActivePerl-W...more >>

The name on the security certificate is invalid - can this be suppressed?
Posted by Grant at 6/10/2004 11:35:31 AM
Greetings all This is probably more of an IE question but I wanted to try my luck here as well. Is it possible to suppress the invalid certificate property dialog box that refers to "The name on the security certificate is invalid" on subsequent visits to the site? I wish to automate a ...more >>

Web Edition Server03
Posted by Ilene at 6/10/2004 11:06:01 AM
I'm trying to install Oracle 9i on Web server 03 however, when I attempt to do so I get the following message: Windows can not open this program, since it's been disabled. I've tried as both domain admain and local admin Anyone, Please?...more >>

Syslog Tool
Posted by JB at 6/10/2004 9:26:04 AM
I am looking for a tool that will report on malicious activity in the IIS logs. ...more >>

IIS and RSA
Posted by Gilgamesh at 6/10/2004 8:43:29 AM
I was wondering if anybody out there has developed an application to pass SecurID authentication to a RSA server programatically. Thanks, Gilgamesh ...more >>

SelfSSL
Posted by Harry Simpson at 6/10/2004 8:27:21 AM
Couple of questions please: 1. Installed a server cert on a Windows 2003 Server box just fine. I used SelfSSL and then set IIS web to require secure pages. This works great for our purposes. Would this be ok to use for intranets behind a firewall within a LAN environment? 2. If not, what...more >>

Transferring a secure certificate to another server
Posted by Mike M at 6/10/2004 7:34:24 AM
I am unsure of the proper procedure to transfer an SSL certificate from one MS 2000 Server to another MS 2000 Server both running IIS 5.0. When I run the IIS certificate wizard I only get the options to "Renew", "Remove", or "Replace" the current certificate. I was of the understanding that th...more >>

HTTP 404 - Blocked web sites
Posted by Loraine at 6/10/2004 5:58:53 AM
Hi can anyone help me regarding the WeBlocker prgramme. Have bought a second hand computer with this software on. It is stopping me going onto some basic (non explicit sites) sites. When i go into the software to change settings its asking for password of which i dont know. is there an...more >>

IIS/WXP permissions problems
Posted by jon_scriven NO[at]SPAM hotmail.com at 6/10/2004 5:30:57 AM
Hi, I've been having this problem and was hoping that someone could point me in the right direction. Server: Windows 2000 SP4, IIS Version 5 (I think ??) - Whatever the default is for this OS. Clients: Windows XP Pro SP1. IE6 SP1 patched up to date. I have this weird problem with all...more >>

Web Server Authentication
Posted by Jay at 6/10/2004 3:26:03 AM
We have a web based application that we would like to make available to our users. The web server is situated in the dmz (Public) segment of our network. The problem is that we want to use windows authentication via our Active Directory Server which is located on the LAN (Private) segment of our n...more >>

FTP Hacked - Can't Delete Files as Admin
Posted by Jason at 6/9/2004 10:06:09 PM
Someone used my FTP server as a warez site (they uploaded a movie as many .RAR files). Now I can't delete the files even though I am logged in as Administrator. The hacker used some weird naming conventions so that Windows thinks the files have been moved or deleted. When I go in throug...more >>

File sharing between an AD Domain controller and a member server through a firewall
Posted by Clementius at 6/9/2004 9:15:00 PM
Hi, I am configuring an access-list for traffic from a dmz server to an internal server. The dmz server is a 2003 domain member server. The internal server is a 2003 AD controller and file server. The plan is to allow file access from the dmz server to the internal server. Eventually, the dmz se...more >>

HTTP 401.3 - Access denied by ACL on resource
Posted by Narongsak M. at 6/9/2004 6:52:22 PM
Hi All, I set up new local web for my company. And also I set up a new virtuaul directory. But when user login to this web page. It prompt dialog box for enter username, password and domain. How can I set to ignore dialog box? Thanks, ...more >>

my home page
Posted by stephen at 6/9/2004 6:18:18 PM
My home page has been changed to "about:blank" and it is supposed to be "comcast.net". Everytime I try to change it in the internet options tab, and then try to re-open explorer it goes back to "about:blank". I have Mcafee virus scan and it still does not seem to find and correct it. Wh...more >>

Integrated authentication (NTLM)
Posted by john smith at 6/9/2004 2:37:25 PM
Hi all, When enabling Integrated auth on a member server is there anyone way of changing the default domain the member server trys to validate a user against? By default a memeber server trys to validate the user against its local security database, not the domain. This is a problem when a...more >>

LoginAdmin.ImpersonateUser DLL
Posted by Daniel C. Di Vita at 6/9/2004 10:45:44 AM
This worked a while back, but for some reason it is not working any more. I am using II5 with ASP 3.0. I have created the DLL form microsoft's site: http://support.microsoft.com/default.aspx?scid=kb;EN-US;248187 This is the code I am working with: <% Set objLogon = Server.CreateObject("Log...more >>

I need help
Posted by Johanna at 6/9/2004 9:10:16 AM
Someone has hacked into my MSN addy and has threatend me with it, i dont know what to do can you help me??...more >>

iis prompts for credentials between forests with ntlm
Posted by Don at 6/8/2004 8:55:22 PM
I have 2 Windows 2003 forests and 2 W2k3 domains (MaritnAD and MSGDev). I separated the domains into 2 forests for security reasons. There are 2 external trusts to make a 2-way trust between the domains. Both domains are in W2k Native mode. I have IIS6 installed on a member server in the M...more >>

iis lockdown on Windows 2003?
Posted by Ter Kwee Leng at 6/8/2004 4:13:57 PM
Hi, I was just wondering whether do we still need to install iis lockdown tool for iis 6 running on Windows 2003? There is no document on whether this is neccessary. Is there a equivalent function in iis 6 that does what URLScan does (allowed extension, max content length, etc)? Regar...more >>

Cross-Site Tracing attack
Posted by Anita Gillaspey at 6/8/2004 1:56:02 PM
I received an message from our Information Security department that says it detected that one of our web servers was vulnerable to a Cross-Site Tracing attack. This server is running Microsoft Server 2000, IIS 5, MSDE SQL Server, and a web app. What do I need to do to protect this web server from ...more >>

AspTear
Posted by Michelle at 6/8/2004 1:31:10 PM
We have a website that is being hit at a rate of 70 times a minute by a program called AspTear. At least that is what shows up in the logs under User Agent. Does anyone know how to block this and any other user agent in IIS 6? Thanks, Michelle...more >>

IE 6 ..THUNKCONNECT32.FAILURE
Posted by Luci at 6/8/2004 9:16:10 AM
WAS TRYING TO DOWNLOAD SERVICE PACK FOR IE AFTER DOWNLOADING .... MSG POPPED UP.. THUNKCONNECT32.FAILUR THEN SOMETHING ABOUT ......W95INF32.DL I AM OPERATING 98SE WITH IE 5 CURRENTLY..... THANKS IN ADV FOR ANY HELP TO ALL........more >>

Page cannot be displayed
Posted by cjsupport at 6/8/2004 4:51:03 AM
I get page cannot be displayed when I use https on my website. I am running IIS 5.0 any help would be appreciated...more >>


DevelopmentNow Blog