Groups | Blog | Home


Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008


all groups > iis security > august 2004 > threads for august 15 - 21, 2004

Filter by week: 1 2 3 4 5

Integrated WIndows Authentication and IE
Posted by Charlie at 8/21/2004 3:45:43 PM
Hi, I have created an Intranet website and uses Integrated Windows Authentication to allow domain users who are logged in to AD to access the Intranet site without being prompted for logon. However, on all the users PC IE settings, I will need to add the Intranet site via the IE security op...more >>

SSL and Private Key ?
Posted by WJ at 8/19/2004 9:49:08 PM
When generating the CSR to obtain the SSL certificate from a CA, where is the "private key" is stored at by IIS-6 in a Windows 2003 server ? I can only back it up to a pfx format from the Personal store on the server. How do I convert the pfx to text/ascii format ? Thanks John ...more >>

SSL issue
Posted by Amy at 8/19/2004 5:01:59 PM
Hi, I got "The page can not be displayed" message after I did the following steps: 1. Installed the Certificate 2. Type the SSP port # 443 3. Checked Require SSL box 4. Restart computer But still not working. Please help. Thanks in advance. Amy...more >>

Microsoft Security Updates
Posted by Della A. Fleetwood at 8/19/2004 3:55:17 PM
Why do I continue to get one Security update #823559, on a daily (sometimes more than once / day) basis?...more >>

web site operator rights in IIS 6.0
Posted by John at 8/19/2004 3:13:33 PM
How can I give one user web site operator equivalent rights in IIS 6.0 so they can publish a web site using Front Page without making them local admins to the web server? I've given the account logon local rights, full control over the web site's directories, and tried using the mbexplore...more >>

CreateObject("CDONTS.NewMail") fails
Posted by Richard at 8/19/2004 12:31:01 PM
We have an ASP page running on IIS 5.0 running on Win2K Server with Exchange Server running on the same box. This ASP page runs has a line of code that sends an email using: CreateObject("CDONTS.NewMail") This page runs fine under windows ingegrated authentication, but fails with anonym...more >>

Double Hop issue? HELP!
Posted by Anthony at 8/18/2004 9:06:55 PM
sorry for the x-post, I didn't recieve a response and thought I might have been in the wrong group... thanks.. --- I am trying to get a users DN by translating the LOGON_USER NT4 format variable. I am ONLY using windows authentication for security settings: This is a Windows 2000 IIS 5 Ser...more >>

TCP/IP filtering
Posted by dave at 8/18/2004 7:13:55 PM
hello what are the minimum port required to make IIS as web server. The site hosted on this server uses sql data (which is hosted at other place) and CDO.Message object to send mail. I filtered TCP/IP and set TCP port tht permits only 80,53,4656.. If I permit all UDP port, then it wor...more >>



IIS Lockdown on Windows 2003 ??
Posted by Dan at 8/18/2004 5:49:02 PM
We just moved our web applications to a new web server that has Windows 2003 Server Web Edition. Should I / can I run IIS lockdown on this?...more >>

Integrated Authentication & SSL Performance - IIS6
Posted by Rubber Chicken at 8/18/2004 4:36:20 PM
Hi, I am in the process of developing a new Intranet. The site is configured to use Integrated authentication and runs over SSL. When SSL is not running the site is lightening fast, but SSL creates a 3-5 second delay as it queries Active Directory. At the top of the page is displayed the ...more >>

SSL
Posted by kiki at 8/18/2004 12:54:08 PM
Last week we upgrade our Web server from Nt4.0 to W2k server and IIS5.0. I imported the Certificate key to the new server. Now we're getting the following messsage: The security certificate has expired or is not yet valid. The Certificate is valid until 03/03/06 I checked the time on my new ...more >>

Security and Viruses
Posted by Lee at 8/18/2004 9:55:02 AM
I keep getting the ServU-Damon virus that installs all kinds of directories and files on my computer and setting the security on them so that I cannot delete them. How can I get IIS secure engouh that this will quit happening. The IWAM account is disabled and the IUSR account is only a member ...more >>

Allow extension in the urlscan
Posted by EYAL_G NO[at]SPAM HILAN.CO.IL at 8/18/2004 4:01:14 AM
In our site we are use extension like html#k1,html#avoda,html#ke . The parameters after the # are changed . How i can enable this extensions group on the urlscan. Thanks, Eyal....more >>

XP SP2 - Bug with IIS Windows Authentication?!
Posted by anilr NO[at]SPAM post.com at 8/18/2004 1:30:40 AM
After installing SP2 for Windows XP, I noticed that my local IIS web site that uses Windows authentication was acting strangly. When I go to : http://localhost/mySecureSite - no login window - site is displayed http://[myIPAddress]/mySecureSite - login window - site is displayed (after very ...more >>

Problem with IIS 5.0 App Protection Low (IIS 6.0 Local System is d
Posted by GD at 8/18/2004 1:27:02 AM
Hi, We currently have an C# ASP.NET app that operates correctly out of Windows Server 2003 and IIS 6.0. It makes a couple operating system calls (Active Directory routines and certificate routines), so in order for it to have permission to make those calls, we found we had to create an app...more >>

IIS 6.0 -> all the sudden you need to enter a password to access my website !?
Posted by b at 8/17/2004 3:53:50 PM
Dear all, something strange is happening with our server (is win2003 entreprise with iis 6). Several websites are configured on the machine and working properly (for a while). All of the sudden you need to enter a password and login to enter each of the sites, without anything changed in...more >>

explorer.exe caused an error and will close.......
Posted by marie at 8/17/2004 2:21:49 PM
Hello, When turning my computer lately I get this error message! I aslo open my task manager and found this SPYFADER running?! Does anybody knows what this means, since I never dowloaded anything remote to this name, although I do have spyboot/ spyblaster and ad-aware installed, coul...more >>

explorer.ixe errors & SPYFADER running automatically??!!!
Posted by Marie at 8/17/2004 2:10:02 PM
Hello, When acessing web sites, I get this error lately: explorer.exe caused an error and will close!! (I have the latest version of IE though) I also open task manager very fast in time to see SPYFADER running?! my question is this: since I never personally dowloaded any program or an...more >>

401.3 Unathorized: Access is denied due to an ACL set on the reque
Posted by RAJ at 8/17/2004 12:47:01 PM
I setup a SUS server on a Windows 2003 server running IIS 6.0. I am unable to access the SUS website on the SUS server. When I try I get a message: "HTTP Error 401.3: Unauthorized: Access is denied due to an ACL set on the requested resource. Anonymous access is enabled on the default we...more >>

Errors on web pages created by administrator
Posted by nospam NO[at]SPAM tgylnospam.no at 8/17/2004 12:09:01 PM
I run IIS 5.0 on windows 2000 professional workstation. I create and save web pages to wwwroot. The pages have a connection to SQL Server 2000 and displays records or pivot diagrams When I log on to the workstation as poweruser and then create and save web-pages to wwwroot they work as exp...more >>

Certificate difference
Posted by gawel at 8/17/2004 10:37:36 AM
Hajo, I would like to buy a ssl certifacte in thawte. But they offer two types of them: 1. SSL123 http://www.thawte.com/ssl123 2. and web server sss http://www.thawte.com/ssl/ and I do know what is the essential differnece between them. I will use them on IIs 6.0. Any suggestions ? Gawel...more >>

Password issuses with connecting clients.
Posted by Steve at 8/17/2004 8:18:46 AM
On a web server I manage, we have client problem: Any client that connects to a password protected site works fine, unless it's a XP client. XP machines will connect and authenticate to the server fine, but when the user checks the "Remember my password" box, it doesn't remember the passwor...more >>

SSL Problem
Posted by Jitender at 8/16/2004 11:37:02 PM
I have configured my website to run on SSL. I have obtained a valid certificate from trusted CA. this is IIS 6.0 on windows 2003. My website on https:// pages is running fine but I am unable to run simple http:// page. I have not forced site to require encryption. I want my home page to run ...more >>

IIS 4.0 vs IIS 5.0 -- Act differently behind Load Balancer
Posted by Abuzz4me at 8/16/2004 2:11:01 PM
I am having the following issue: In IIS 4.0, a stopped Web site will not respond on IP_Address:Port 80. IIS 5.0, will continue to respond on Port 80, but will not publish Web Requests. This happens on FTP also. The problem is that the Load Balancer thinks that the site is up, because the I...more >>

Frontpage and IIS security
Posted by mbazelon NO[at]SPAM intellicomp.us at 8/16/2004 1:29:00 PM
I am trying allow my web master to configure a website through Frontpage. When I log in as an administrator I can edit the webpage without any issues. When my webmaster attempts to get in, Frontpage keeps asking for the username and password. The webmaster has full control of the website dire...more >>

writing files using "fopen" from ISAPI dll's
Posted by balaji sundaram at 8/16/2004 11:13:09 AM
I have an sample ISAPI dll file code. I have compiled this file & saved in a virtual directory. As I am using "IIS 6.0 in windows 2003 server", I registered the file in web service extensions folder (in IIS). Then i invoked the file from web browser. It worked file. Then I added c code in ...more >>

Can't test SSL enabled website
Posted by Nishi at 8/16/2004 5:42:00 AM
I was installing a CMS server 2002. I have checked all the hardware and software prerequisites. For your information I have a Windows 2000 Adv. Server(with SP-4), IIS 6.0. MCMS Server is running fine but when I try to open the "Site Manager" from another computer in the network I get the...more >>

restated: VS Develper (non Admin) missing IIS MMC Management
Posted by usenet NO[at]SPAM achren.org at 8/16/2004 4:44:56 AM
Hi, I'm reposting this question as no resultion as yet. Couple of updates, so re-read if you have seen before. I am trying to set up VS Developer users with non-administrator rights debug ASP (3) in VB.Net, and of course manage IIS MMC. This has succeeeded on 3 machines, including my own -...more >>

adware
Posted by anonymous NO[at]SPAM discussions.microsoft.com at 8/16/2004 4:43:36 AM
how to cleam this adware c:\sp.exe adware-Nsearch...more >>

Standalone Versus AD Joined Instalation
Posted by Randy Faulkner at 8/15/2004 2:15:27 PM
Would this difference in installation effect access permissions for ASP pages under IIS 6/Win3K? My server is joined to AD and I cannot get ASP pages to run under anonymous -- getting 401.3 ACL pemissions errors. Adding some other form of authentication for ASP pages (integrated or basic...more >>

How exactly ASP page maintains session?
Posted by Julia at 8/15/2004 11:00:46 AM
Hi, I have the following scenario Page A.asp call page B.asp Page B.asp need to load page C.asp make some changes and return the result to IE when A.asp is first running IIS create a session object and B.asp need to pass the session cookie(?) to C.asp How exactly ASP page maintains ...more >>


DevelopmentNow Blog