all groups > iis security > august 2004 > threads for august 15 - 21, 2004
Filter by week: 1 2 3 4 5
Integrated WIndows Authentication and IE
Posted by Charlie at 8/21/2004 3:45:43 PM
Hi,
I have created an Intranet website and uses Integrated Windows
Authentication to allow domain users who are logged in to AD to access the
Intranet site without being prompted for logon.
However, on all the users PC IE settings, I will need to add the Intranet
site via the IE security op... more >>
SSL and Private Key ?
Posted by WJ at 8/19/2004 9:49:08 PM
When generating the CSR to obtain the SSL certificate from a CA, where is
the "private key" is stored at by IIS-6 in a Windows 2003 server ? I can
only back it up to a pfx format from the Personal store on the server. How
do I convert the pfx to text/ascii format ?
Thanks
John
... more >>
SSL issue
Posted by Amy at 8/19/2004 5:01:59 PM
Hi,
I got "The page can not be displayed" message after I did
the following steps:
1. Installed the Certificate
2. Type the SSP port # 443
3. Checked Require SSL box
4. Restart computer
But still not working.
Please help. Thanks in advance.
Amy... more >>
Microsoft Security Updates
Posted by Della A. Fleetwood at 8/19/2004 3:55:17 PM
Why do I continue to get one Security update #823559, on a
daily (sometimes more than once / day) basis?... more >>
web site operator rights in IIS 6.0
Posted by John at 8/19/2004 3:13:33 PM
How can I give one user web site operator equivalent
rights in IIS 6.0 so they can publish a web site using
Front Page without making them local admins to the web
server?
I've given the account logon local rights, full control
over the web site's directories, and tried using the
mbexplore... more >>
CreateObject("CDONTS.NewMail") fails
Posted by Richard at 8/19/2004 12:31:01 PM
We have an ASP page running on IIS 5.0 running on Win2K Server with Exchange
Server running on the same box.
This ASP page runs has a line of code that sends an email using:
CreateObject("CDONTS.NewMail")
This page runs fine under windows ingegrated authentication, but fails with
anonym... more >>
Double Hop issue? HELP!
Posted by Anthony at 8/18/2004 9:06:55 PM
sorry for the x-post, I didn't recieve a response and thought I might have
been in the wrong group... thanks..
---
I am trying to get a users DN by translating the LOGON_USER NT4 format
variable. I am ONLY using windows authentication for security settings:
This is a Windows 2000 IIS 5 Ser... more >>
TCP/IP filtering
Posted by dave at 8/18/2004 7:13:55 PM
hello
what are the minimum port required to make IIS as web
server. The site hosted on this server uses sql data
(which is hosted at other place) and CDO.Message object
to send mail.
I filtered TCP/IP and set
TCP port tht permits only 80,53,4656..
If I permit all UDP port, then it wor... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
IIS Lockdown on Windows 2003 ??
Posted by Dan at 8/18/2004 5:49:02 PM
We just moved our web applications to a new web server that has Windows 2003
Server Web Edition. Should I / can I run IIS lockdown on this?... more >>
Integrated Authentication & SSL Performance - IIS6
Posted by Rubber Chicken at 8/18/2004 4:36:20 PM
Hi,
I am in the process of developing a new Intranet. The site is configured to
use Integrated authentication and runs over SSL. When SSL is not running
the site is lightening fast, but SSL creates a 3-5 second delay as it
queries Active Directory.
At the top of the page is displayed the ... more >>
SSL
Posted by kiki at 8/18/2004 12:54:08 PM
Last week we upgrade our Web server from Nt4.0 to W2k
server and IIS5.0. I imported the Certificate key to the
new server. Now we're getting the following messsage: The
security certificate has expired or is not yet valid.
The Certificate is valid until 03/03/06
I checked the time on my new ... more >>
Security and Viruses
Posted by Lee at 8/18/2004 9:55:02 AM
I keep getting the ServU-Damon virus that installs all kinds of directories
and files on my computer and setting the security on them so that I cannot
delete them. How can I get IIS secure engouh that this will quit happening.
The IWAM account is disabled and the IUSR account is only a member ... more >>
Allow extension in the urlscan
Posted by EYAL_G NO[at]SPAM HILAN.CO.IL at 8/18/2004 4:01:14 AM
In our site we are use extension like html#k1,html#avoda,html#ke .
The parameters after the # are changed .
How i can enable this extensions group on the urlscan.
Thanks,
Eyal.... more >>
XP SP2 - Bug with IIS Windows Authentication?!
Posted by anilr NO[at]SPAM post.com at 8/18/2004 1:30:40 AM
After installing SP2 for Windows XP, I noticed that my local IIS web
site that uses Windows authentication was acting strangly. When I go
to :
http://localhost/mySecureSite - no login window - site is displayed
http://[myIPAddress]/mySecureSite - login window - site is displayed
(after very ... more >>
Problem with IIS 5.0 App Protection Low (IIS 6.0 Local System is d
Posted by GD at 8/18/2004 1:27:02 AM
Hi,
We currently have an C# ASP.NET app that operates correctly out of Windows
Server 2003 and IIS 6.0. It makes a couple operating system calls (Active
Directory routines and certificate routines), so in order for it to have
permission to make those calls, we found we had to create an app... more >>
IIS 6.0 -> all the sudden you need to enter a password to access my website !?
Posted by b at 8/17/2004 3:53:50 PM
Dear all,
something strange is happening with our server (is win2003 entreprise
with iis 6).
Several websites are configured on the machine and working properly (for
a while). All of the sudden you need to enter a password and login to
enter each of the sites, without anything changed in... more >>
explorer.exe caused an error and will close.......
Posted by marie at 8/17/2004 2:21:49 PM
Hello,
When turning my computer lately I get this error
message! I aslo open my task manager and found this
SPYFADER running?! Does anybody knows what this means,
since I never dowloaded anything remote to this name,
although I do have spyboot/ spyblaster and ad-aware
installed, coul... more >>
explorer.ixe errors & SPYFADER running automatically??!!!
Posted by Marie at 8/17/2004 2:10:02 PM
Hello,
When acessing web sites, I get this error lately:
explorer.exe caused an error and will close!! (I have the
latest version of IE though) I also open task manager
very fast in time to see SPYFADER running?! my question
is this: since I never personally dowloaded any program
or an... more >>
401.3 Unathorized: Access is denied due to an ACL set on the reque
Posted by RAJ at 8/17/2004 12:47:01 PM
I setup a SUS server on a Windows 2003 server running IIS 6.0. I am unable
to access the SUS website on the SUS server. When I try I get a message:
"HTTP Error 401.3: Unauthorized: Access is denied due to an ACL set on the
requested resource.
Anonymous access is enabled on the default we... more >>
Errors on web pages created by administrator
Posted by nospam NO[at]SPAM tgylnospam.no at 8/17/2004 12:09:01 PM
I run IIS 5.0 on windows 2000 professional workstation.
I create and save web pages to wwwroot. The pages have a connection to SQL
Server 2000 and displays records or pivot diagrams
When I log on to the workstation as poweruser and then create and save
web-pages to wwwroot they work as exp... more >>
Certificate difference
Posted by gawel at 8/17/2004 10:37:36 AM
Hajo,
I would like to buy a ssl certifacte in thawte.
But they offer two types of them:
1. SSL123 http://www.thawte.com/ssl123
2. and web server sss http://www.thawte.com/ssl/
and I do know what is the essential differnece between them.
I will use them on IIs 6.0.
Any suggestions ?
Gawel... more >>
Password issuses with connecting clients.
Posted by Steve at 8/17/2004 8:18:46 AM
On a web server I manage, we have client problem:
Any client that connects to a password protected site
works fine, unless it's a XP client. XP machines will
connect and authenticate to the server fine, but when the
user checks the "Remember my password" box, it doesn't
remember the passwor... more >>
SSL Problem
Posted by Jitender at 8/16/2004 11:37:02 PM
I have configured my website to run on SSL. I have obtained a valid
certificate from trusted CA. this is IIS 6.0 on windows 2003. My website on
https:// pages is running fine but I am unable to run simple http:// page.
I have not forced site to require encryption. I want my home page to run
... more >>
IIS 4.0 vs IIS 5.0 -- Act differently behind Load Balancer
Posted by Abuzz4me at 8/16/2004 2:11:01 PM
I am having the following issue:
In IIS 4.0, a stopped Web site will not respond on IP_Address:Port 80. IIS
5.0, will continue to respond on Port 80, but will not publish Web Requests.
This happens on FTP also. The problem is that the Load Balancer thinks that
the site is up, because the I... more >>
Frontpage and IIS security
Posted by mbazelon NO[at]SPAM intellicomp.us at 8/16/2004 1:29:00 PM
I am trying allow my web master to configure a website through
Frontpage. When I log in as an administrator I can edit the webpage
without any issues. When my webmaster attempts to get in, Frontpage
keeps asking for the username and password. The webmaster has full
control of the website dire... more >>
writing files using "fopen" from ISAPI dll's
Posted by balaji sundaram at 8/16/2004 11:13:09 AM
I have an sample ISAPI dll file code. I have compiled this
file & saved in a virtual directory. As I am using "IIS
6.0 in windows 2003 server", I registered the file in web
service extensions folder (in IIS). Then i invoked the
file from web browser. It worked file. Then I added c code
in ... more >>
Can't test SSL enabled website
Posted by Nishi at 8/16/2004 5:42:00 AM
I was installing a CMS server 2002. I have checked all the
hardware and software prerequisites. For your information
I have a Windows 2000 Adv. Server(with SP-4),
IIS 6.0.
MCMS Server is running fine but when I try to open
the "Site Manager" from another computer in the network I
get the... more >>
restated: VS Develper (non Admin) missing IIS MMC Management
Posted by usenet NO[at]SPAM achren.org at 8/16/2004 4:44:56 AM
Hi,
I'm reposting this question as no resultion as yet. Couple of updates,
so re-read if you have seen before.
I am trying to set up VS Developer users with non-administrator rights
debug ASP (3) in VB.Net, and of course manage IIS MMC. This has
succeeeded on 3 machines, including my own -... more >>
adware
Posted by anonymous NO[at]SPAM discussions.microsoft.com at 8/16/2004 4:43:36 AM
how to cleam this adware
c:\sp.exe
adware-Nsearch... more >>
Standalone Versus AD Joined Instalation
Posted by Randy Faulkner at 8/15/2004 2:15:27 PM
Would this difference in installation effect access
permissions for ASP pages under IIS 6/Win3K? My server is
joined to AD and I cannot get ASP pages to run under
anonymous -- getting 401.3 ACL pemissions errors. Adding
some other form of authentication for ASP pages
(integrated or basic... more >>
How exactly ASP page maintains session?
Posted by Julia at 8/15/2004 11:00:46 AM
Hi,
I have the following scenario
Page A.asp call page B.asp
Page B.asp need to load page C.asp make some changes and return
the result to IE
when A.asp is first running IIS create a session object
and B.asp need to pass the session cookie(?) to C.asp
How exactly ASP page maintains ... more >>
|