all groups > iis security > june 2004 > threads for june 8 - 14, 2004
Filter by week: 1 2 3 4 5
Connecting to localhost
Posted by Michelle at 6/14/2004 7:15:15 PM
I am trying to use my IIS server on Windows XP Pro, but
when I try go create a server-based web in FrontPage on
either localhost or 127.0.0.1, or open the ColdFusion
Administrator (web-based program) on my PC, I receive a
Connecting to Local Host dialog box that asks for my
default_realm U... more >>
IIS and Perl
Posted by Dhiraj at 6/14/2004 3:01:01 PM
I am trying to run sample code from Microsoft to configure Smartphone. When I run the perl code, I get error "can not spawn cmd.exe." I am using IIS 5.0 and Activestate Perl. Also from the perl code I can not write to directories under wwwroot. If I try to write to c:\\temp it works fine. PLEASE H... more >>
test2
Posted by chadmscom at 6/14/2004 2:02:01 PM
IIS bypassing NTFS Security
Posted by Ishmealm at 6/14/2004 1:53:01 PM
Hi,
I have a website that has basic authenication and SSL enabled, anonymous has been turned off. The site points to a folder. On that folder I have a group that is denied access. The group is for non-employees, it it my intention to deny all contractors access to this folder. I am a cont... more >>
403 Error when accessing SUS
Posted by Terry at 6/14/2004 11:52:01 AM
I have installed SUS 1.0 w/SP1. I am trying to access the SUSAdmin. When i try to do this I am getting the 403 forbidden error.
http://servername/susadmin
If I try to gain access to other websites on this server, everything works fine. It's only when trying to access SUS does it give the ... more >>
MS Access on IIS 5.0
Posted by Robin at 6/14/2004 10:12:51 AM
I have 3 MS Access databases running on IIS 5.0.
1 Is for internal use only while the other 2 are used to
display postings and have users submit information via
PHP pages.
What is the best way to restrict access to these
databases? Either within MS Access, IIS or NTFS file and
folder ... more >>
How to install website certificate as Trusted?
Posted by Tony Su at 6/14/2004 8:47:34 AM
Specifically I'm referring to SBS2K3, but should probably
be applicable to any other situation where a website is
secured with a Makecert or is issued by a CA not already
trusted.
When a User views the suspect certificate, clicks on "View
Certificate" and "Install Certificate," whether th... more >>
filter Ip bandwidth to IIS6 server
Posted by mbelton at 6/14/2004 7:50:08 AM
I would like to limit the bandwidth to a particular
website. BUT, I want to limit by IP addresses.
I know I can easily limit the entire sites badnwidth but
then one IP could essentially use all the available
bandwidth. I want to limit the amount of bandwidth or
connections or connecti... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Uuser Access to Run IIS
Posted by jen at 6/14/2004 5:15:34 AM
How can you get a regular domain user to run IIS when
they are not, and cannot be a memebr of the
Administrators group.
Thanks.... more >>
I_USR requires Logon type 3 - Help!
Posted by sechead at 6/13/2004 11:09:18 PM
Problem:
When IUSR tries to logon to the FTP server, the attempt is unsuccessful.
Errors are logged in the Event Viewer Security and System logs.
Configuration:
Windows XP Pro
Service Pack 2 beta
IIS 5.1
IIS Lockdown
Local Security Settings -> User Rights Assignm... more >>
Setting SSL on IIS6
Posted by brad NO[at]SPAM eznetideas.com at 6/13/2004 2:51:05 PM
I purchased a SSL and trying to install it on IIS6. I have a dedicated
IP Address that will use this SSL. I can go into the website
properties and click on the 'Directory Security' tab and click 'View
Certificate' and see the certificate just fine. Here are the settings
I have...
Description:... more >>
unwanted search toolbar on explorer
Posted by paul James at 6/13/2004 2:41:57 PM
A search toolbar (IST search) appeared on my explorer and I
can't get rid of it. I tried to uninstall explorer but it
will not leave the machine. I tried to install over it but
i get the message that i can install over an existing copy.
I am using Netscape right now but I still need to get this
... more >>
makecert: why only test certificates?
Posted by Martin M at 6/13/2004 2:06:10 PM
I wonder why microsoft states that makecert creates only
test certificates. Is this just for legal reasons (i.e.
because I am not a trusted CA) or is this for technical
reasons?
As I understand a certificate needs a number which is the
product of two very large primes (about 100 digits). It... more >>
No internet pages can be opened
Posted by Kino at 6/13/2004 4:25:01 AM
The problem is every time I try to log on to the internet " The page cannot be found" pops up. Is this a virus ? how can this be resolved?... more >>
Know MTX.EXE leak?
Posted by Bitoy at 6/12/2004 3:29:08 PM
Is there any know MTX.EXE memory leak and if there's any readily patch
available? I'm running IIS4.0.
Ty in advance.
-Bitz
-----= Posted via Newsfeeds.Com, Uncensored Usenet News =-----
http://www.newsfeeds.com - The #1 Newsgroup Service in the World!
-----== Over 100,000 Newsgroups ... more >>
java msg
Posted by wayne at 6/12/2004 9:13:05 AM
hs_err_pid232 - Note ....Can anyone give me information
on this page as to whether it is a security risk or as to
its purpose... more >>
how to block pop ups
Posted by chris at 6/11/2004 11:05:42 PM
I am being plagued by about 4 pop ups every minute,;
adware, spyware, when u search taking over my browser,
multiple companies ad pop ups constantly, plus i am runnin
g half speed alot. I am not very tech savy, any clear
help would be great. I am running internet explorer
windows xp... more >>
SSL Cert. Creation
Posted by Joe at 6/11/2004 7:21:11 PM
Hello,
I am wondering if you can create your own trusted
certificate in Windows Server 2003 Enterprise to use on
the internet?
Thank you
Joe... more >>
explorer homepage problems
Posted by anonymous NO[at]SPAM discussions.microsoft.com at 6/11/2004 3:52:42 PM
ok...my home page on explorer keeps changing even though
i have all ready sellected a different page i need to
know why is changes and gives me a useless pop-up page... more >>
ActiveX - local computer
Posted by Mikie at 6/11/2004 10:19:47 AM
I have an ActiveX control I want to be used on just a local computer. I
keep getting the security popup. Is there anyway to eliminate the
popup?
Thanx... more >>
II6.0 logon box
Posted by Kevin Wheeler at 6/11/2004 9:05:43 AM
Can anyone tell me what setting controls if a web user is prompted for
username and password or not? I have the default iis6.0 setup and when I
open web pages, it prompts me for a user name and password.
Kevin
... more >>
Server object error 'ASP 0178 : 80070005'
Posted by Kevin Wheeler at 6/11/2004 9:03:27 AM
Can anyone help me with this error? I'm running w2k3 IIS 6.0
Creating WmsCmdf.cmdf...
Server object error 'ASP 0178 : 80070005'
Server.CreateObject Access Error
/Wms/USSample/createCMDF.asp, line 59
The call to Server.CreateObject failed while checking permissions. Access is
denied ... more >>
Virus?
Posted by Figgy at 6/10/2004 9:54:03 PM
my daughter's computer keeps shuting down everytime she
tries to go on line. A timer appears counting down to
zero and then shuts down.Please tell me what can I do? ... more >>
External Access to IIS via Kerberos Authentication
Posted by mike_eeee NO[at]SPAM hotmail.com at 6/10/2004 9:05:49 PM
Hello all!
I'm having a heck of a time with a file folder share on IIS6.0.
- I have a IIS server (IISWEB) running a website with
"iisweb.domain.com" and "iisweb" as its headers.
- This website is using "a share located on another computer" as its
home directory.
- The server has been trust... more >>
HTTP 405: The HTTP verb used to access this page is not allowed
Posted by rblackma at 6/10/2004 7:36:01 PM
I added a a second website to my IIS server to host, then created another account in exchange for the webmaster account pointing from the second website. All was well until I tried to log into my exchange webmail. I get the login screen, I log n and immediately get the above error. HTTP 405: The HTT... more >>
system32
Posted by ryeguy at 6/10/2004 4:38:01 PM
this folder(System32)keeps popping up? why?... more >>
SSL for Encryption
Posted by Harry Simpson at 6/10/2004 2:51:53 PM
We want to provide SSL for our ASP.NET web app, primarily for the encryption
of data sent from the client back to the server. The server is just a
server within the office domain with an intranet type IP like 10.0.0.104 or
something. No www.domainname.com type domain name.
I want to turn IIS... more >>
Help! "you are not authorized to view this page"
Posted by Senormic at 6/10/2004 2:16:01 PM
I keep getting this message when I try to right click and browse on my Virtual directory. However, when I right click and choose browse on the file I want to display within the details pane of my Virtual Directory, it displays.
Can anyone tell me where I can look to set the permissions that I am ... more >>
cannot save file to a web folder iis 60
Posted by skg at 6/10/2004 1:16:01 PM
I need to be able to create and save files to a web folder. If I use new text doc I get access denied. If I use notepad creates file it says I don't have permission to save to this directory. I need to use web folders for an application that creates and deletes lock files, and user can change fil... more >>
OWA on SBS2003 Standard works internally, doesn't render properly from outside
Posted by Lanwench [MVP - Exchange] at 6/10/2004 12:57:06 PM
Hi all - getting my feet wet with SBS (2003 Standard) for the first time
(well, except for a long-ago bad experience with SBS4.x, but my therapist
says it's OK for me not to discuss that anymore & just move on with life).
This server was installed from scratch about two weeks ago (no migration,... more >>
Windows Authentication
Posted by Gorge Bush at 6/10/2004 12:32:13 PM
Hi there,
in the IIS help it states "Integrated Windows authentication
is best suited for an intranet environment". Does this mean that it will
not work over the internet or that there are potential problems?
... more >>
Allow Perl on IIS 6 on Windows 2003
Posted by Pete Robbins at 6/10/2004 11:46:05 AM
I've just added a Windows 2003 Server and according to ActiveState "Perl CGI is set to Prohibited by default and must be explicitly changed to Allow in the IIS Manager.
They have great instructions for doing this located at: http://aspn.activestate.com/ASPN/docs/ActivePerl/faq/Windows/ActivePerl-W... more >>
The name on the security certificate is invalid - can this be suppressed?
Posted by Grant at 6/10/2004 11:35:31 AM
Greetings all
This is probably more of an IE question but I wanted to
try my luck here as well. Is it possible to suppress the
invalid certificate property dialog box that refers
to "The name on the security certificate is invalid" on
subsequent visits to the site? I wish to automate a ... more >>
Web Edition Server03
Posted by Ilene at 6/10/2004 11:06:01 AM
I'm trying to install Oracle 9i on Web server 03 however, when I attempt to do so I get the following message: Windows can not open this program, since it's been disabled. I've tried as both domain admain and local admin
Anyone, Please?... more >>
Syslog Tool
Posted by JB at 6/10/2004 9:26:04 AM
I am looking for a tool that will report on malicious activity in the IIS logs. ... more >>
IIS and RSA
Posted by Gilgamesh at 6/10/2004 8:43:29 AM
I was wondering if anybody out there has developed an application to pass
SecurID authentication to a RSA server programatically.
Thanks,
Gilgamesh
... more >>
SelfSSL
Posted by Harry Simpson at 6/10/2004 8:27:21 AM
Couple of questions please:
1. Installed a server cert on a Windows 2003 Server box just fine. I used
SelfSSL and then set IIS web to require secure pages. This works great for
our purposes. Would this be ok to use for intranets behind a firewall
within a LAN environment?
2. If not, what... more >>
Transferring a secure certificate to another server
Posted by Mike M at 6/10/2004 7:34:24 AM
I am unsure of the proper procedure to transfer an SSL
certificate from one MS 2000 Server to another MS 2000
Server both running IIS 5.0. When I run the IIS certificate
wizard I only get the options to "Renew", "Remove", or
"Replace" the current certificate. I was of the
understanding that th... more >>
HTTP 404 - Blocked web sites
Posted by Loraine at 6/10/2004 5:58:53 AM
Hi can anyone help me regarding the WeBlocker prgramme.
Have bought a second hand computer with this software on.
It is stopping me going onto some basic (non explicit
sites) sites. When i go into the software to change
settings its asking for password of which i dont know. is
there an... more >>
IIS/WXP permissions problems
Posted by jon_scriven NO[at]SPAM hotmail.com at 6/10/2004 5:30:57 AM
Hi,
I've been having this problem and was hoping that someone could point
me in the right direction.
Server: Windows 2000 SP4, IIS Version 5 (I think ??) - Whatever the
default is for this OS.
Clients: Windows XP Pro SP1. IE6 SP1 patched up to date.
I have this weird problem with all... more >>
Web Server Authentication
Posted by Jay at 6/10/2004 3:26:03 AM
We have a web based application that we would like to make available to our users. The web server is situated in the dmz (Public) segment of our network. The problem is that we want to use windows authentication via our Active Directory Server which is located on the LAN (Private) segment of our n... more >>
FTP Hacked - Can't Delete Files as Admin
Posted by Jason at 6/9/2004 10:06:09 PM
Someone used my FTP server as a warez site (they uploaded
a movie as many .RAR files).
Now I can't delete the files even though I am logged in as
Administrator. The hacker used some weird naming
conventions so that Windows thinks the files have been
moved or deleted. When I go in throug... more >>
File sharing between an AD Domain controller and a member server through a firewall
Posted by Clementius at 6/9/2004 9:15:00 PM
Hi,
I am configuring an access-list for traffic from a dmz server to an internal
server. The dmz server is a 2003 domain member server. The internal server
is a 2003 AD controller and file server. The plan is to allow file access
from the dmz server to the internal server. Eventually, the dmz se... more >>
HTTP 401.3 - Access denied by ACL on resource
Posted by Narongsak M. at 6/9/2004 6:52:22 PM
Hi All,
I set up new local web for my company. And also I set up a new virtuaul
directory. But when user login to this web page. It prompt dialog box for
enter username, password and domain. How can I set to ignore dialog box?
Thanks,
... more >>
my home page
Posted by stephen at 6/9/2004 6:18:18 PM
My home page has been changed to "about:blank" and it is
supposed to be "comcast.net". Everytime I try to change
it in the internet options tab, and then try to re-open
explorer it goes back to "about:blank". I have Mcafee
virus scan and it still does not seem to find and correct
it. Wh... more >>
Integrated authentication (NTLM)
Posted by john smith at 6/9/2004 2:37:25 PM
Hi all,
When enabling Integrated auth on a member server is there anyone way of
changing the default domain the member server trys to validate a user
against? By default a memeber server trys to validate the user against its
local security database, not the domain.
This is a problem when a... more >>
LoginAdmin.ImpersonateUser DLL
Posted by Daniel C. Di Vita at 6/9/2004 10:45:44 AM
This worked a while back, but for some reason it is not working any
more. I am using II5 with ASP 3.0. I have created the DLL form
microsoft's site:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;248187
This is the code I am working with:
<%
Set objLogon = Server.CreateObject("Log... more >>
I need help
Posted by Johanna at 6/9/2004 9:10:16 AM
Someone has hacked into my MSN addy and has threatend me
with it, i dont know what to do can you help me??... more >>
iis prompts for credentials between forests with ntlm
Posted by Don at 6/8/2004 8:55:22 PM
I have 2 Windows 2003 forests and 2 W2k3 domains
(MaritnAD and MSGDev). I separated the domains into 2
forests for security reasons. There are 2 external trusts
to make a 2-way trust between the domains. Both domains
are in W2k Native mode. I have IIS6 installed on a member
server in the M... more >>
iis lockdown on Windows 2003?
Posted by Ter Kwee Leng at 6/8/2004 4:13:57 PM
Hi,
I was just wondering whether do we still need to install iis lockdown
tool for iis 6 running on Windows 2003?
There is no document on whether this is neccessary. Is there a
equivalent function in iis 6 that does what URLScan does (allowed
extension, max content length, etc)?
Regar... more >>
Cross-Site Tracing attack
Posted by Anita Gillaspey at 6/8/2004 1:56:02 PM
I received an message from our Information Security department that says it detected that one of our web servers was vulnerable to a Cross-Site Tracing attack. This server is running Microsoft Server 2000, IIS 5, MSDE SQL Server, and a web app. What do I need to do to protect this web server from ... more >>
AspTear
Posted by Michelle at 6/8/2004 1:31:10 PM
We have a website that is being hit at a rate of 70 times
a minute by a program called AspTear. At least that is
what shows up in the logs under User Agent.
Does anyone know how to block this and any other user
agent in IIS 6?
Thanks,
Michelle... more >>
IE 6 ..THUNKCONNECT32.FAILURE
Posted by Luci at 6/8/2004 9:16:10 AM
WAS TRYING TO DOWNLOAD SERVICE PACK FOR IE
AFTER DOWNLOADING ....
MSG POPPED UP.. THUNKCONNECT32.FAILUR
THEN SOMETHING ABOUT ......W95INF32.DL
I AM OPERATING 98SE WITH IE 5 CURRENTLY.....
THANKS IN ADV FOR ANY HELP TO ALL........ more >>
Page cannot be displayed
Posted by cjsupport at 6/8/2004 4:51:03 AM
I get page cannot be displayed when I use https on my website. I am running IIS 5.0 any help would be appreciated... more >>
|