all groups > iis security > july 2004
Filter by week: 1 2 3 4 5
IIS / SelfSSL port question
Posted by derscheff at 7/31/2004 12:48:47 PM
Hello,
I am running 3 sites on my win2k3 server with iis.
I installed selfssl for one site - run fine.
As I wanted to install another selfssl certificate the "new" site wa
not startable anymore.
Of course both sites are using port 443 - but shouldnt it be possibl
to handly different s... more >>
Multiple sites using SSL on 1 server
Posted by Barry van Dijk at 7/30/2004 2:30:21 PM
We only used to have one website using SSL until now.
We've setup the second site to use port 444 instead of the default 443,
which works, but I'm wondering if this is the way to do it?
My url will always show https://mydomain:444
Thanks,
Barry
... more >>
IIS SSL Problem(DNS Server Error)
Posted by Ali AYHAN at 7/30/2004 10:18:06 AM
i ve got asp project that worked in win 2000.i backup ssl
certificate and upgrade OS to win 2003 and install
certificate.after that when i called page from local
there is no problem but when called from internet
sometimes page dont display and dns error displayed.how
can i solve this probl... more >>
CGI execute permissions
Posted by Britt Tabor at 7/30/2004 6:21:03 AM
I have a perl script that needs to query the registry (reg.exe QUERY) and return the value to the webpage. The script runs fine from the command line but when run from the webpage it tells me access denied. I do a lot of linux bash stuff and there is a sudo command and I know windows has a runas but... more >>
Help
Posted by Re at 7/30/2004 2:21:21 AM
I am experiencing unwanted sites popping up whilst
accessing online information and checking emails, these
sites do not have addresses and cannot be blocked. I have
the latest anti-virus software but because of the sites
rediverting automatically i cannot access the sites I
want to view. P... more >>
401.3 ACL Error
Posted by Randy Faulkner at 7/29/2004 7:23:07 PM
From a new install of IIS 6.0, I removed integrated
security and kept just anonymous user access selected.
Bringing up localhost or the web URL itself, I get this
error. I can manually type in a HTML file in the URL
under the root and have it display. Checked the obvious
anonymous user ... more >>
unwanted web site
Posted by Gary Hester at 7/29/2004 6:38:15 PM
can anybody tell me how to remove a web site from the
right click of my mouse. It popped one day and I can't
delete it. It is only there when I go online.... more >>
FTP logs
Posted by Joe at 7/29/2004 5:46:34 PM
Hello,
I am new to IIS FTP and been enjoying it. But I have not
yet had the time to understand what to look for in the
logs as compared to HTTP. I have seen this in the logs
16:18:31 82.83.71.242 [22]USER anonymous 331 0
16:18:31 82.83.71.242 [22]PASS Tgpuser@home.com 530 1326
17:53:39 6... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Limit access by referrer?
Posted by Gregory at 7/29/2004 10:48:26 AM
I would like to limit access to a website by the referrer is that possible
under IIS 6 and if so how.
Thanks
... more >>
Removing fatfind.org as search engine
Posted by Barb at 7/29/2004 10:45:09 AM
Some how this has become my preferred search engine. I
can go to numerous search engines such as MSN,Yahoo,
Goggle; and it will the following:
http://www.fastfind.org/ss/sds/85524/search/qr.aspx?
&SQ=loblaw news canada&SE=go
ogle.com&SR=10&URL=www.google.com
Due to spyware, this is a ... more >>
Question regarding certificate mapping
Posted by Kent Tegels at 7/29/2004 10:41:32 AM
Forgive me if this question is something I already know, but I think
there's a mismatch between my expectations and reality. Wouldn't be
the first time *that* happened, of course.
I've successfully got certificate server set up, and I've got account
mapping going. But when a user with a cer... more >>
Script and read permissios
Posted by Chris Leffer at 7/29/2004 9:46:22 AM
Hi.
When I create a virtual directory under IIS 5.0, the wizard asks for the
permissions I wnat to set to this virtual directory. I often choose Read
and Scripts execution.
Now I have an old site to maintain. I want to define Script permissions
only for the folder holding my asp pages and R... more >>
Install IIS 6 on separate partition
Posted by Ron at 7/29/2004 3:59:19 AM
Hi,
I am in the process of installing IIS 6.0 on a separate partition and will be using a answer file during a unattended component installation. I have been reviweing this subject fully and have reviewed the following KB articles from MS Support Q259671, Q309506 and googled the hell out of this. A... more >>
IIS 4.0 failed after MS04-021 patch installed
Posted by Calvin at 7/28/2004 8:21:02 PM
I encountered inetpub.exe error after applied security patch MS 04-021 on my IIS 4.0 server. The IIS service failed to start and I have to uninstall the patch in order to resolve the problem. Any ideas what is the cause ? Appreciate if you have the answer for me. Thanks.
Below is the message found ... more >>
IIS Restart API
Posted by dclari NO[at]SPAM hotmail.com at 7/28/2004 7:04:12 PM
Hi all,
I'm trying to install Trend Officescan 5.5 onto a clean W2k3 / IIs 6.0
server, however the installation cannot create a necessary service.
The trend knowledgebase says I should run the service creation app
manually, however when I try to i get the following error ( Run as
server adm... more >>
Critical Updates
Posted by avildasfriend at 7/28/2004 4:06:50 PM
On a windows 2000 server, I used the web to download and
install five critical security updates. KB839645-
Vulnerability in Windows Shell could allow remote code
execution, KB840315-Vulnerability in html help could allow
code execution,KB841873-Vulnerability in Task Scheduler
could allow c... more >>
installation question (XP SP 1 what?)
Posted by Bill Bernat at 7/28/2004 3:26:50 PM
VS 2003 wants me to get security updates from
http://msdn.microsoft.com/vstudio/security and then install IIS -- as
installation prerequisits.
When I install IIS, it asks for the XP SP 1 CD (or files). I've downloaded
XP SP 1, but the files it searches for don't seem to be in it (admxprox.dll
... more >>
Security checking software
Posted by Shannon at 7/28/2004 2:21:35 PM
Anyone know of any applications that can be run on a
workstation that will test the security of a server
running IIS? I'm trying to lock my server down to prevent
attacks and would like to confirm that what I'm doing is
working.
thanks,
Shannon... more >>
strange copy in my address bar
Posted by anonymous NO[at]SPAM discussions.microsoft.com at 7/28/2004 1:44:41 PM
Hi,After I sign in to msn I get by1fb.bay1 in front of
msn.Then everywhere I go it is allways in front of every
site in the address bar.Its like something is tracking
everywhere I go.I have run a norton scan and I also have
AD ware and have run their scan and it is still there.Is
anyone el... more >>
Setting Up IIS secure website
Posted by Josh at 7/28/2004 7:34:32 AM
Hello,
I am using Win XP SP 1, IIS 5.1
I can see my web site over the internet. I am trying to
set up a secure folder on my web site. I have tried to
use the permissions wizard using the template Secure Web
Site. I use the (recommended) Replace All Directory and
File Permissions. Then ... more >>
Password Protection
Posted by teenzbutler at 7/27/2004 7:33:50 PM
I password protected a directory within my web. When
logged in our own network, I am unable to get
authenticated when I type in my username and password. I
receive an HTTP 401.1 error. However, when I access the
same site off our network, I am authenticated and page the
loads. Why is it... more >>
FSO Object (Write Access Issues)
Posted by Brian at 7/27/2004 5:53:49 PM
I have IIS 5.1 on Win XP Pro SP1. I'm trying to use ASP's
FSO Object to write to a file, but it never works.
Everytime I open the page, it just sits there, I wait and
wait, then it gives me an operation Timeout Message. I've
checked over the settings in IIS over and over again to
make sure... more >>
Trimming down App. Mappings in IIS 6.0
Posted by PaulT at 7/27/2004 2:56:56 PM
I'm trying to find explanation for the application mappings
which get installed with IIS 6.0 and .net framework.
Which ones do we really need to keep if we are primarily using asp and aspx
(.Net)?
I would like to hear from the IIS admins if it's a good practice to trim
down the application ... more >>
Not Authorized - Win98 clients
Posted by Paul King at 7/27/2004 11:50:26 AM
Hi there,
We have a Windows2003.net IIS server running our corporate intranet. All of
our clients run XP/Win2k and access the intranet start .asp page ok.
However our 2 Win98 clients do not work - they say you are not authorized to
access this page.
All the machines at present run on a l... more >>
Access to non-virtual-directory UNC paths from IIS 6.0
Posted by Jeff Johnson [MVP: VB] at 7/27/2004 11:40:44 AM
[Please let me know if there is a better group in which to post this
question.]
Background:
We have an ASP.NET Web app in my company which compares two data sources and
reports the differences between them. This app can handle different types of
data, both DBMS- and file-based. For file-based... more >>
Re: Internet Explorer history log
Posted by Jason at 7/27/2004 7:52:00 AM
I don't know if I am in the right place but I need help.
I am afraid that my son is viewing material on the
internet that I do not wish for him to see. I want to
investigate this before confronting him. Is there a log
file somewhere that will give me a listing of web sites
visited thru ... more >>
IIS fails after MS04-021, CANT LOCATE HOTFIX, HELP
Posted by Peter Gogo at 7/27/2004 2:01:22 AM
I applied the patch, also my IIS 4.0 failed. I went to the
support site and could not obtain the hotfix. According to
MSO-021 the security update is vital to have, so
uninstalling it is not a choice. Any idea on how to get
the said hotfix.
Your help will be highly appreciated. I tried t... more >>
WshShell Access
Posted by Andrew at 7/26/2004 10:31:14 PM
What permisions do I need to enable to allow the IUSR_ to
execute a command line program in IIS 6?
Eg, "cmd /c dir"
This works when logged onto web site as administrator but
not anonymously?
--Andrew... more >>
URL
Posted by janet at 7/26/2004 5:45:17 PM
I am running windows xpwith internet mail.
When I download a page and synchronize to view said page
offline, it comes up error downloading URL. I can still
view the page online but not offline. I have tried to
synch several times with no success.
Kind Regards
janet... more >>
authenticatio n
Posted by kom at 7/26/2004 4:46:38 PM
My website running on Windows 2003 is suddenly prompting
for username and password when someone visits the site.
I've not made any changes in the IIS. Please help.... more >>
User access.
Posted by Ashvin Domadia at 7/26/2004 11:32:56 AM
I am running few iis5 member servers. One of the servers
is acting very weird. I have assigned ntfs permission to
the folder. When people try to access this secure folder
thought web browser, for example:
http://domain.com/secure/, the operating system asks for
username and password. T... more >>
OE security
Posted by davidlachance NO[at]SPAM cogeco.ca at 7/26/2004 7:17:31 AM
recently after having my computer reconfigured and
formatted I am unable to open attachments that have been
sent to me.These are not of a suggestive nature and are
entirely clean,sent to me by people that have checked
thier respective systems for bugs,yet outlook express will
not allow the... more >>
MS04-025
Posted by Patcher at 7/24/2004 6:29:29 PM
What will be in this patched to be released next week?... more >>
EventID 105 on W3SVC and MSFTPSVC Please help!!
Posted by Deyan at 7/24/2004 5:31:06 PM
Dear ALL,
This problem has been haunting me since I've upgrade my PC from Win NT 4 to
Win 2000
I used to install IIS 4 and run ASP pages on NT 9 SP6 with no problem at
all. Since I upgraded from NT to Win 2000 i can get IIS to run. On startup
I have to records in Event Log ( EventID 105 )... more >>
Supressing Proxy Authentication
Posted by Mangapathi at 7/24/2004 9:50:24 AM
Hi !!!
I am having windows 2000 professional pc & Internet
Explorer 6.0
accessing proxy for internet using authentication. I want
to supress
the authentication for browsing. I made windows
username/password as a
proxy username and password, even though it is asking
authenticat... more >>
Logon Issues
Posted by R. Riedl at 7/22/2004 11:37:19 PM
Just recently my Windows 2000 server running IIS 5 has
stopped providing access through FrontPage to some
accounts. These accounts were able to log on and to work
with the webs they had authority to work with but now when
trying to log on the usename/password dialog just pops
right back u... more >>
Operator choice
Posted by Curt Shaffer at 7/22/2004 5:05:46 PM
I have a question regarding the missing operator option that was available
in 2000. I have a web department and I need to delegate the creating,
changing etc.. to them without giving them admin privileges on the server.
In windows 2000 I can go into the properties of the server and add them as... more >>
IIS port 80 closed???
Posted by Joerg M. Colberg at 7/22/2004 4:20:25 PM
Hi all,
Here's what could be a very stupid question. I got IIS installed and I
haven't really touched much. I added a web application using
VisualStudio.NET and that works fine using "localhost". HOWEVER, when I try
to reach the webserver remotely (from a different computer on the LAN or... more >>
SMTP server in IIS.....
Posted by Jim at 7/22/2004 11:36:08 AM
I am new to this so excuse my ignorance.....
I have several COM+ components sat on an application server that sits in a
DMZ, it is not publicly accessable from the outside world and it is only
used to process requests from an asp.net site hosted in IIS6.0, now one of
the COM+ components requir... more >>
SSL page cannot be displayed.
Posted by Hunter at 7/22/2004 11:21:04 AM
When accessing a secure page on a 2000 IIS 5.0 server (https) I get the error "The page cannot be displayed", "cannot find server or DNS error". Using the same path and http I get "You are not authorized to view this page" so the page is there and secured. I used a CA server in our local domain to... more >>
IIS routing requests to another instance of IIS
Posted by Jim at 7/22/2004 10:24:13 AM
I have 2 web servers, one is publicly accessable on the internet and one
that isn't, how do I route requests from the public web server to the none
public web server.....
... more >>
IIS Logon Credentials
Posted by Steve Gear at 7/22/2004 9:55:58 AM
I am having a minor situation that I can't seem to find a
fix for. Whenever "Integrated" Authentication is checked
in IIS for my Exchange Virtual Directory, I must enter a
domain name preceding the username to logon to any
mailbox. Unchecked and works as expected, but I know
this is not ... more >>
internet security
Posted by kevin at 7/22/2004 2:27:04 AM
I have a problem with my ISP. I use PeoplePC Online.
Currently their automatic dialer does not allow one to
enable the XP software firewall (does not allow access to
properties of my dial up connection...period!)
does any one know how to turn on the XP firewall through
the command prompt ... more >>
IIS 6.0 configured application pool and Integrated Windows Auth
Posted by Gursharan Singh at 7/22/2004 1:30:48 AM
I have created an application pool in IIS 6.0 and configured it to use a
domain account. The application pool starts up ok. I have also added the
domain account to IIS_WPG group and granted it change process token and
adjust memory quotas for a process identity.
When I turn on integrated windo... more >>
IIS Hack : Anyone explain cause...
Posted by Team Macromedia at 7/21/2004 7:30:00 PM
Hey All,
We recently had one of our IIS servers hacked (not mission critical
server, so we were not too bothered) in which one of the sites default
document was either hacked or replaced with a file stating the following
: "SORRY ADMIN SPYKIDS OWNZ YOUR WINDOWS f*** you USA irc.brasnet.org ... more >>
Blocking worms by config of Default Web Site?
Posted by Need Help at 7/21/2004 7:45:27 AM
Hi Folks, first post. Does anyone know, is it possible
to block automated worms by locking down the default
website completely by blocking all incoming IP's, yet
having subdirectories or virtual directories under the
default web that may be more open to others? My guess is
the worms coul... more >>
spy-ad ware
Posted by fede at 7/21/2004 7:23:07 AM
cerco qualcuno che possa aiutarmi a risolvere il problema
relativo al soggetto
... more >>
Service Unavailable Error
Posted by Sharefred at 7/21/2004 6:01:45 AM
I am having problems with an error " Service
Unavailiable", what can I do to correct this condition?... more >>
IIS 4.0 fails after MS04-021
Posted by buchhei NO[at]SPAM yahoo.de at 7/21/2004 3:03:24 AM
After applying the security Patch MS04-021 (841373)
on two (!) NT4.0 SP6a Servers (German)
the IIS 4.0 Services (ftp, www) failed to start on both servers.
The error message says "Modul nicht gefunden" ("Module not found")
error number 0126 and 7023.
There is no way to start the services.
... more >>
Unable to re-run or manually remove the IIS Lockdown Tool
Posted by sstuart NO[at]SPAM 80-20.com at 7/20/2004 9:52:10 PM
The tool was installed. An unrelated problem led to the log file being
purged. As a result, the tool can not be re-run. The tool detects that
it has been installed and attempts to repair its prior action, but
fails as follows:
Starting undo...
Backing up IIS metabase...
Unable to backup IIS ... more >>
|