all groups > iis security > august 2004
Filter by week: 1 2 3 4 5
Need a honest answer here...
Posted by anonymous NO[at]SPAM discussions.microsoft.com at 8/31/2004 2:49:51 PM
My current hotmail account, has been hacked, the secret
questions changed. The password changed. I cannot find a
way as to how to recover it. In need of immediate
assistance.
... more >>
Problem With Login Null
Posted by Riane de Oliveira Torres Santos at 8/31/2004 10:03:52 AM
Hi,
I have a problem. My web server is a Windows 2k Server and my database
server a Windows 2003. I use windows authentication to login at SQL Server,
but when I access from a client machine that uses Win 2k Professional I
always receive this message: "[Microsoft][ODBC SQL Server Driver][SQL
... more >>
restricting access by IP address or range?
Posted by djc at 8/31/2004 9:12:44 AM
I don't see an option anywhere in IIS to restrict traffic to the web server
based on IP address or IP range. I think I saw it only for the FTP server...
is this option not available for web sites also? I'm using IIS 5 on windows
2000.
thanks in advance. any info is appreciated.
... more >>
only administrators able to access HTTPS
Posted by chris at 8/31/2004 7:37:54 AM
Hi
I have installed certificate service for my outlook web
access.Now only administrator can login to the Ootlook web
access.How can I give access to all users
Chris... more >>
data miner
Posted by Kathy at 8/31/2004 5:45:16 AM
How do we stop the data miners from getting into our
PC's. They just keep coming back after we delete them
using adware 6.... more >>
SSL
Posted by Lisa at 8/30/2004 4:29:37 PM
Hi,
I followed the instruction in
http://support.microsoft.com/default.aspx?scid=kb;EN-
US;290625 to set up my web SSL, but I got Page can not be
dispalyed error message. I am using Win 2003 and IIS 6.
Please help!
Thanks in advance!
Lisa... more >>
JET error in interdev debug only (DCOM error?)
Posted by SÁRINGER Zoltán at 8/30/2004 3:56:19 PM
hi,
When I open the connection to a JET database, I get 80004005 "unknown
error". I know, it's usually permission problem, but I added all users to
the db directory, and have this error only if I debug the application:
(environment: "celan" w2000prof, interdev server, all patches.)
here are... more >>
migrating certificates (export the private key not available)
Posted by etown9799 NO[at]SPAM yahoo.com at 8/30/2004 10:08:30 AM
We are trying to migrate the SSL Cert to a new server and have run
into a snag. When we start the export wizrd the "export the private
key" option is not available. (Also, the do not delete the key once
exported is not available)
I tried turning off IIS 5.0 to see if that would solve the pro... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Importing a certificate with IIS6
Posted by remster NO[at]SPAM gmail.com at 8/30/2004 9:47:58 AM
I've recently exported a Verisign Global Certificate from Win2k/IIS5
using these instructions: http://support.microsoft.com/?id=232136
I then imported it on Win2k3/IIS6 following these instructions:
http://support.microsoft.com/?id=232137
This in itself doesn't seem to be enough, as I get a ... more >>
ACCESS DENIED issuing Cert Request
Posted by TG at 8/30/2004 7:35:48 AM
Not much info. I go to website in IIS. Properties, dir
sec, Server Cert.
Create new cert
Prep but send later.
Go through entering my info.
When I get to the end I get "Access Denied" Error.
I am logged in as Admin and tried saving file to C:\ and
desktop.
The Server is 2003 Web Edition whi... more >>
Can't find Certification Authority on 2003
Posted by TG at 8/30/2004 6:49:09 AM
I have installed IIS and after doing so I go back to
Add/Remove programs but Certificate Authority is still not
an option to install. I have Windows Server 2003 Web
Edition.... more >>
SSL Config Issue
Posted by RLW at 8/30/2004 6:41:03 AM
We have set up SSL on our Win2K, IIS 5.0 server.
On the Directory Security tab, we are unable to open Edit
for the Secure Communications properties.
The server is listening on port 443; HTTPS is working on
the server thru a test of a web page; and the SSL
Diagnostics tool does not show any ... more >>
How to stop hackers from changing the index.asp file
Posted by Jay_Reborn at 8/29/2004 4:25:01 PM
There has been a sudden increase from hackers changing the the root files on
the webserver...
They are exploiting something... but can someone help here???
the message people get is "Fatal Error ownz YOU"
a number of groups on irc.brasnet.org are hitting thousands of websites...
it will s... more >>
Web SSL
Posted by anonymous NO[at]SPAM discussions.microsoft.com at 8/29/2004 3:42:51 PM
Is there a way to enable SSL for multiple domains that are
hosted on a single IIS server? Thanks.... more >>
How to Import Certificate file into windows certificate store under IWAM account
Posted by Helena Cai at 8/29/2004 3:23:20 PM
Hi,
Due to the nature of our system, we need to dynamically import certificate
files into windows certificates store and access the certificate store from
ASP pages, these ASP pages call a VB dll component, which uses the CAPICOM
component to manipulate windows certficate store.
Because A... more >>
re: freedom security
Posted by p raymond at 8/29/2004 1:16:41 AM
just installed tonight freedom security. I am connected
to the net and yet it says not connected. Because of this
problem I am unable to activate the system. Have tried
what was suggested to me and cannot seem to rectify this
problem. What do I do now. Please reply as soon as
possible... more >>
ASP/ASP.NET
Posted by Johnny Kitchens at 8/28/2004 7:56:32 PM
Both can be run simultaneous right?
--
Johnny Kitchens
... more >>
comments about SP2
Posted by omar at 8/28/2004 6:21:01 PM
i like the popup blocker but for those who already have software its a menace
sometimes disabling both for sometimes posting a comment here
i like the new setup it looks really nice, but i would rather have the
"Windows Update" look like the previous version this one seems to be quite
anno... more >>
files in my favorites without me knowing
Posted by Ray at 8/28/2004 5:08:47 PM
I keep having the same files put in my favorites when i
go on the internet.
How can i stop this ?... more >>
IIS 5.1 to IIS 6.0
Posted by Serge Myrand at 8/28/2004 2:07:17 PM
Hi All,
I had and ISAPI application running very well on IIS 5.1 under WIndows
2000 Pro. I reinstalled it on IIS 6.0 under Windows Server 2003 web
edition and I get a 404 message. Is there any new security setting to
perform or any new alias?
any help will be appreciate
serge
... more >>
WinSer2003
Posted by Johnny Kitchens at 8/28/2004 12:20:50 AM
Where is the burn to CD?
--
Johnny Kitchens
... more >>
XP SP2
Posted by Johnny Kitchens at 8/28/2004 12:20:15 AM
I don't like it already, where is the burn to CD
--
Johnny Kitchens
... more >>
IIS5.1 and permissions
Posted by Ol Timer at 8/28/2004 12:17:00 AM
I have something very weird going on. I have a very simple counter on our
website run under IIS5/2000 for over two years. No problem. It simply keeps
a incremented count in a text file, opens the file, read the value,
increment by one, write the new value back to the text file, (Overwrite it).
D... more >>
Capturing hack/login attempts
Posted by tech_ed at 8/27/2004 11:50:11 PM
Greets.
I manage a bunch of IIS servers and am seeing quite a bit of traffic
relating to attempts to gain access to my machines.
The information I see is in the event logs.
In the security logs, I see:
Source: Security
Category: Account Logon
Event ID: 681
The logon to account: pubah
by: M... more >>
Is my setup secure?
Posted by Kal525 at 8/27/2004 8:35:02 PM
I have a photo album on my website on which I want restrict access to certain
personal albums. In order to do this I opend up IIS manager and disabled
anonymous access for the specific folder and created a user account, say
"User" and made it part of the Guests user group. I disabled logon l... more >>
watched messages
Posted by ftirrell NO[at]SPAM comcast.net at 8/27/2004 1:57:53 PM
What does it mean when a message in the sent items folder
states 'this message is being watched.' Thank you.
Fred... more >>
strange security problem
Posted by Ramon Niese at 8/27/2004 1:38:42 PM
Hi,
we have a windows 2000 server (2 partitions c: and d:) running with
several websites hosted on it. Everything went fine until we had a crash
a month ago. On the c: drive the system is installed and on the d: drive
the data of all the websites and logfiles etc. is stored.
After the crash... more >>
Session timeout
Posted by paul b at 8/27/2004 1:04:22 PM
Does anyone know how to for username/password login window to re-appear
after session times out? It's Win 2003 server system, with Integrated
Windows Authentication enabled. Any help would be greatly appreciated.
Regards,
Paul
... more >>
Permission problems with integrated authentication
Posted by Karun Karunakaran at 8/27/2004 10:40:44 AM
Hi,
I have a website running under IIS 6.0 on Windows 2003 server boxes. The
site hosts ASPX web pages (ASP.NET v1.1). The website is load balanced
between two servers (the user hits a virtual address, and is then routed to
either of the web servers). The site uses SQL sessioning. Integrated
... more >>
Basic Authentication Issue
Posted by David Hurley at 8/26/2004 12:11:44 PM
I found this question on the web and it is the same problem I am having, but
I cannot seem to find an answer, any help would be greatly appreciated.
Thanks,
David
---------------------------------------
We have an IIS 5-based intranet Web site running on a Windows 2000 Server
domain me... more >>
Unknown network interface
Posted by Kerri at 8/26/2004 10:48:12 AM
I recently had my computer on/off switch replaced and
noticing now that task manager displays a network tab and
it states wan ppp/slip Interface. A system scan in
troubleshooting mode has me worried. I don't know what it
means but it sure looks to me like I have a network card
and somebo... more >>
Stream
Posted by Joseph Lloyd at 8/26/2004 5:28:26 AM
I don't know what has happened but I have looked at my
credit card statement and find trhat you have charged me
$35 for what I do not know I do not recollect that I
sugned up for STREAM
Please cancell this immediately
Joseph... more >>
Outlook express
Posted by Janine at 8/26/2004 3:16:02 AM
How can I stop Outlook Express deleting attachments that
it thinks has a virus?... more >>
IIS6 with SSL and Certs....slooow access
Posted by Sandy Wood at 8/25/2004 4:14:57 PM
I've got a stand-alone sever with iis6.0 and CA installed
to generate a cert for my https site. It seems to work
fine, albeit very, slow to bring up the ssl page, say 30
seconds or so. I've been using the SSL Diag tools to
create a cert for test and it really increases the access
speed to ... more >>
blocking porn
Posted by Phillis at 8/25/2004 12:26:13 PM
am i able to block all porn from my computer for any user
even if they are a guest?... more >>
blocking porn
Posted by phillis at 8/25/2004 12:06:30 PM
i listed my question earlier, but accidentally exited
before i received my response. is there a way that i can
totally block porn from any user on my computer or my aol
account?... more >>
blocking porn totally from my computer
Posted by Phillis at 8/25/2004 12:01:02 PM
is there a way that i can block all access to porn on my
computer. i have older children that have access as
general (18), but i do not wish for them to have access
to the porn sites... more >>
Migrating from Windows NT to Windows 2000
Posted by Raj at 8/25/2004 11:37:26 AM
Hi,
We are planning to migrating our current Windows NT
to Windows 2000. I am looking for a checklist that shows
what are all the steps we need to makesure the migration
will be smooth and successfull. Specifically, checklist
and configuration changes related to SSL - Digital
certific... more >>
ASP scripts not running
Posted by ptaylor404 NO[at]SPAM gmail.com at 8/25/2004 3:37:58 AM
Hi All,
Help!!
We have installed the System Update Service on our server in order to
distribute Windows updates to the 60 pc's on the LAN. Now we have
problems with our intranet applications.
The SUS program and associated files were uninstalled and the IIS
lockdown wizard used to resto... more >>
Certificate server
Posted by Ajay Bansal at 8/25/2004 1:01:03 AM
Hi,
Can I use my Windows 2003 server as a certificate server.
I am developing an application which uses OCSP for certificate validation.
Till now I have been using Netscape CMS for generating certificates in my
test environment. But this software has issues with UTF8 encoded
certificates... more >>
why can't I open my e-mail?
Posted by anis at 8/24/2004 7:44:26 PM
Dear administrator,
I tried to open my e-mail at yahoo.com but I can't. The
page I tried to open is always refresed. What happened
with it? Is there any virus?
Regards,
Anis... more >>
delegation of admin rights on IIS6
Posted by Davor Perat at 8/24/2004 3:15:01 PM
I need to delegate administration rights to 4 users. I do not want them to
be local administrators on server, i just want them to be able to controll
IIS. How can I do that?
... more >>
Virus removal please help
Posted by jetfunding2000 NO[at]SPAM yahoo.com at 8/24/2004 2:41:12 PM
I believe I have a virus on my computer which I have
tried to remove manually. Apparently I am not doing it
correctly so I desperatley need help it is called
Internet Optimizer.... more >>
need help:)
Posted by anonymous NO[at]SPAM discussions.microsoft.com at 8/24/2004 11:06:31 AM
I'm having a problem with my home computer. Currently, my
Norton Antivirus has been shut off and I cant seem to
enable it again, also when it shut down my internet went
down as well. Does anyone know what this might be..i think
maybe a virus tried to get in but the firewall blocked it
caus... more >>
ASP.Net process running as admin
Posted by Paul Bauer at 8/24/2004 9:12:41 AM
I recently had a software vendor ask me to give the account that the asp.net
process runs under administrator privileges so that their application would
work correctly. This seemed like a real security risk to me. Should the
asp.net process be allowed to run as an administrator account or is t... more >>
root certificate warning after window update.
Posted by Chris at 8/24/2004 6:25:19 AM
Would anyone know why this error appears after windows
2000 server updates
The server certificate for instance '3' does not chain up
to a trusted root certificate.
For additional information specific to this message please
visit the Microsoft Online Support site located at:
http://www.m... more >>
Load balancing with NTLM or Basic authentication.
Posted by John Morrill at 8/23/2004 5:35:01 PM
Greetings!
If we are doing loading balancing across servers using NTLM, is a sticky
session required?
I assume that a sticky session would not be required by Basic
authentication, because the user name and password is sent every time a
browser sends data to the server. We are thinking o... more >>
Removing Requirement for SSL
Posted by Sam Ev at 8/23/2004 4:19:45 PM
Hello, I have SBS 2000 running with IIS and Exchange and went through this
walk though on how to secure OWA with an SSL certificate.
http://www.smallbizserver.net/Default.aspx?tabid=83
We set the default website up to require an SSL connection because we didn't
want people to be able to acce... more >>
PHP newbie questions
Posted by Bradley Plett at 8/23/2004 12:20:44 PM
I have a reasonably hardened install of Win2k3 and IIS. I am a .NET
developer, so I understand that world fairly well. However, I now
have some PHP that needs to be run on the same server. I'm looking
for a little insight and/or advice.
My primary concern is: what security issues do I need... more >>
No authority could be contacted for authentication
Posted by Jay at 8/23/2004 11:55:26 AM
I am having some kind of security problem which I don't understand. I have
Windows 2003/iis6 as my web server which is hosting web application
configured for integrated authentication (NT Authentication). My Domain is
set on other Win2k server box with Active Directory and I am using fixed IP
a... more >>
|