Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
all groups > iis security > july 2004 > threads for july 15 - 21, 2004

Filter by week: 1 2 3 4 5

IIS Hack : Anyone explain cause...
Posted by Team Macromedia at 7/21/2004 7:30:00 PM
Hey All, We recently had one of our IIS servers hacked (not mission critical server, so we were not too bothered) in which one of the sites default document was either hacked or replaced with a file stating the following : "SORRY ADMIN SPYKIDS OWNZ YOUR WINDOWS f*** you USA irc.brasnet.org ...more >>


Blocking worms by config of Default Web Site?
Posted by Need Help at 7/21/2004 7:45:27 AM
Hi Folks, first post. Does anyone know, is it possible to block automated worms by locking down the default website completely by blocking all incoming IP's, yet having subdirectories or virtual directories under the default web that may be more open to others? My guess is the worms coul...more >>

spy-ad ware
Posted by fede at 7/21/2004 7:23:07 AM
cerco qualcuno che possa aiutarmi a risolvere il problema relativo al soggetto ...more >>

Service Unavailable Error
Posted by Sharefred at 7/21/2004 6:01:45 AM
I am having problems with an error " Service Unavailiable", what can I do to correct this condition?...more >>

IIS 4.0 fails after MS04-021
Posted by buchhei NO[at]SPAM yahoo.de at 7/21/2004 3:03:24 AM
After applying the security Patch MS04-021 (841373) on two (!) NT4.0 SP6a Servers (German) the IIS 4.0 Services (ftp, www) failed to start on both servers. The error message says "Modul nicht gefunden" ("Module not found") error number 0126 and 7023. There is no way to start the services. ...more >>

Unable to re-run or manually remove the IIS Lockdown Tool
Posted by sstuart NO[at]SPAM 80-20.com at 7/20/2004 9:52:10 PM
The tool was installed. An unrelated problem led to the log file being purged. As a result, the tool can not be re-run. The tool detects that it has been installed and attempts to repair its prior action, but fails as follows: Starting undo... Backing up IIS metabase... Unable to backup IIS ...more >>

MaxClientRequestBufferData or MaxClientRequestBuffer workarounds?
Posted by K7 at 7/20/2004 1:59:20 PM
For the WebDav problem Microsoft posted a workaround of adding a key: MaxClientRequestBuffer with a value of 16384. (Ms03-007). Now in http://www.microsoft.com/technet/security/bulletin/ms04-021.mspx they have added a key MaxClientRequestBufferData with a value of 16384. Is this a misprint or a...more >>

Getting Access Groups for a Folder
Posted by Mandy B at 7/20/2004 10:48:08 AM
I'm using C# to try figure out which of the user groups I have created on my server are attached to a folder in order to decide if I want to display them to the user or not. I can tell what groups the user is in, but I can't tell which groups belong to the folder to compare the two. Has ...more >>



Web Services
Posted by fee at 7/20/2004 8:32:53 AM
Could someone explain to me what web services are? I am tryimg to understand what they are and how they work...more >>

Upload info
Posted by Bruce R at 7/20/2004 6:21:05 AM
Is there anyway you can tell what site is uploading from your computer. I have removed file sharing programs from my PC, I run AD Aware-Zone Alarm yet there is still data going out....more >>

Should I install my own CA for use with OWA?
Posted by mmac at 7/19/2004 10:06:57 PM
Using win2k, exchange 2k. I need to enable Outlook Web Access for my traveling people, I understand that to do this properly I need to use using SSL. I know next to nothing about this subject so I am running through a technet article on the subject and here are the first questions that come to ...more >>

Issues with 8.3 notated files and IIS Security
Posted by News User at 7/19/2004 12:57:09 PM
I am having a strange issue when using 8.3 notation (a ~ character in the name) for file names and hosting them with IIS 5.0. I get prompted for credentials when I select the file. I can rename the file to remove the ~ and it will allow me to download the file using the Anonymous account. Put ...more >>

SFPT With Windows 2000 Server?
Posted by Rob Carey at 7/19/2004 12:26:37 PM
Good Day Folks, Could someone tell me what the steps are and what is required to use SFTP instead of plain FTP in IIS 5.0 on a Windows 2000 Server? Is it different for Windows Server 2003 as we will be migrating to it in the near future? We have a new requirement that the site use SFTP f...more >>

IIS Bin folder Hiding automatically
Posted by Nisar C.K at 7/19/2004 11:52:21 AM
We have several ASP.NET project running on external server, the problem we face is all bin folder on this server get hidden so this reason all asp.net project get error saying bin folder doesn't found couldn't access any site. Whenever we create bin folder this get hidden and we can access...more >>

Direct access to files without using web site
Posted by ktuel NO[at]SPAM streck.com at 7/19/2004 9:23:28 AM
I am running IIS 6. I have an application designed to authenticate the users as to who they are and then only allow them to get certain files depending on how the authenticated. We want all users to be able to access our site. The problem is that if a user was clever, they would be able to mo...more >>

Internet scam?
Posted by Susan David at 7/19/2004 9:20:08 AM
Does anyone have any information concerning Mrs Daphne Deckers - infosponsor233@netscape.net? I have received notification of lottery winnings and need to know if it is a scam. On searching the internet there appears to be a claim of the lottery being associated with Bill Gates to highli...more >>

Application Pool with domain user identity does'nt work with anonymous access disbled
Posted by ReneMo at 7/19/2004 6:28:37 AM
A virutal directory with anonuymous access disabled doesn't work in aa application domain running a domain user as Identity. The domain user is local admin on the intranet server, member o IIS_WPG and has all privileges of Network Service I could find. If I switch on anonymous access, I can...more >>

By pass Scripting Restriction
Posted by hrishikesh musale at 7/18/2004 9:53:58 PM
hey i want to access one html page(from frame or iframe) which is residing on another domain (for e.g. http://www.google.com)and after that i am reading contents of the page by using following code myFrame.document.body.innerHTML which is giving access denied error microsoft document say...more >>

Problems with banners on hotmail webpage and other sites...
Posted by Shumaes at 7/17/2004 10:38:02 AM
I had this problem several months ago suddenly out of the blue. Back then also I discussed over it in a Microsoft Newsgroup and they provided me with a 'run' command and then I edited a file. After that it was good. The problem then was that, banners wouldnt appear on any website that I go to. Espec...more >>

I just installed Norton's Firewall. UGH!
Posted by teelions NO[at]SPAM Yahoo.com at 7/17/2004 12:30:59 AM
I just installed Symantecs Norton's Internet Security to my machine. But now I cannot view web pages from the localhost. I get a "The page cannot be displayed" error. I looked for help at the Symantec support site but there was nothing written about this common problem. How do I fix it? Terry...more >>

Disabling Parent Paths and OWA
Posted by CJ at 7/17/2004 12:22:58 AM
Can Outlook Web Access 2000 function if Parent Paths are disabled in IIS 5.0? Thanks, - CJ...more >>

I keep losing my Internet connection - help!
Posted by Ron Linden at 7/16/2004 5:08:22 PM
I have to reboot my computer, but not my high speed cable modem. This may happen several times an hour or less. I do not have to be accessing the Internet for this to happen. Is anyone aware of a patch for this or does anyone khow I can email support to find out if there is an update?...more >>

Question about SSL certificate created by SelfSSL tool
Posted by Boris Kagan at 7/16/2004 2:52:08 PM
Hello, I was able to create SSL certificate by SelfSSL tool from IIS6 RK and now when user opens our intranet site 'security alert' window pops up. I order to continue user should click 'yes'. Is there any way to fix this? We are trying to use SSL certificates internally. Thanks, Boris ...more >>

IIS 6 SecureBindings
Posted by Juan Cardena at 7/16/2004 2:51:03 PM
Hi I am tiring to get this to work. My problem is that when I have value null from the form The process page pass that value to IIS but If I have two sites working and another site use the same port number It stops one site then starts the other site What can I do so when a pass a null numbe...more >>

Set security for web folder?
Posted by julie NO[at]SPAM vistasg.com at 7/16/2004 8:08:43 AM
I can't seem to set up the following permissions for a folder on my website: I need to set up write permissions only for users logging into the customer side of the site, no permissions for anonymous users (those not logged in) and full permissions for users logging into the administrative port...more >>

intranet
Posted by CAG at 7/15/2004 4:59:02 PM
can you restrict access to your intranet by a user id?...more >>

Limit Max 2 Sessions per IP address
Posted by A.M at 7/15/2004 3:57:30 PM
Hi, Using IIS6, How can I restrict each client IP to maximum 2 sessions, so if a client asks for 3rd session, it waits untill one of other 2 sessions ends. Thanks, Alan ...more >>

Restrict the number of connections
Posted by A.M at 7/15/2004 3:56:32 PM
Hi, Using IIS6, Is it possible to limit webserver to maximum 10 connections? Thanks, Alan ...more >>

Using IIS Manager on a remote Win2k3 IIS 6.0
Posted by Clay Black at 7/15/2004 11:07:55 AM
We have a Novell network and a Window 2k3 native network. We are running an IIS server on the 2k3 side but we need to manage it from both sides. I am a member of the Domain Admins group and the Administrators group on the IIS server. When I try to login as to that server it tells me I am not a...more >>

Popups
Posted by Noel at 7/15/2004 9:39:59 AM
Lately I have been Hammered by popups, How do I stop them. HELP...more >>

Is Disabling WebDAV via registry entry still a good practice in IIS 6.0?
Posted by Paul at 7/15/2004 8:02:22 AM
In IIS 5.0 we had set the following registry entry to disable WebDAV, is that still a good practice in IIS 6.0? [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3SVC\Parameters] "DisableWebDAV"=dword:00000001 Appreciate your help. Thanks, Paul ...more >>

Integrated Security Problems with ADO 2.8
Posted by newbesj NO[at]SPAM chevrontexaco.com at 7/15/2004 2:09:49 AM
We have a couple of Intranet web applications that use Office Web Components, and logon is done using integrated security set to SSPI. Our users have "Automatic logon only in Intranet zone" specified in Zone 2 in their Internet Settings, and this worked fine and dandy - until we installed MDAC...more >>

password protected access to files hosted by IIS
Posted by www.MSmobiles.com at 7/15/2004 12:01:57 AM
hi, how can I implement passowrd protected access to IIS located files? for example: when somebody tries: http://x.msmobiles.com/a/dupa.pdf then page with user name and password should open. then user enters name and password then program connects to certain webservice to validate a...more >>


DevelopmentNow Blog