all groups > iis security > september 2004
Filter by week: 1 2 3 4 5
OQA and web server
Posted by Iain at 9/30/2004 10:43:33 PM
Hi to you all,
I am just about to head into the world of IIS and build a Web Server, as we
would like to Install OWA for Exchange.
Question 1
Which versions of IIS can I use with Windows NT Server.
Question 2
What would be the recommended way to secure the IIS server.
TIA
Iain
... more >>
Hotmail password change
Posted by Bill at 9/30/2004 10:12:13 PM
Sorry if on wrong place but there are none for my queery.
How do I change my "Hotmail" password?
Thank you... more >>
Read ONly
Posted by Timmy at 9/30/2004 4:21:02 PM
I have a question. I want my developers to be able to log on to a W2K or W23
server with IIS running using Terminal services and be able to see the IIS
MMC but not make any changes to anything. A true read only access. Is that
possible?
... more >>
IIS TOMCAT REDIRECTOR SSL HOW TO
Posted by John McClain at 9/30/2004 4:00:25 PM
HER IS THE SCENARIO:
We have a jsp webapp that uses Tomcat
We have an isapi_redirector to redirect requests for JSP pages to tomcat
We have a virtual directory in IIS under the default web site that points to
our web app root dir
We have a SSL certificte available for use
We have an ASP page ... more >>
Windows Authentication in IIS6
Posted by CJM at 9/30/2004 2:20:15 PM
I have an ASP application, and for the first time I'm trying to use Windows
Authentication.
I have it working on my development machine (XP/IIS5.1), ie if I call the
authentication page from my machine it *seems* to work.
However, when I copied the pages to my development server, and tired c... more >>
anonymous access AND integrated windows authentication enabled on IIS 6.0 serverproblem.
Posted by (tnishikawa NO[at]SPAM nsbgroup.com) at 9/30/2004 1:36:10 PM
I am trouble shooting at a client site that has windows server 2003 & IIS 6. Our install sets up IIS to have anonymous access & windows authentication enabled (no other access is enabled). NTFS permissions are setup so that the anonymous user (IUSR_<machinename>) has read and execute permissions on ... more >>
Does the lack of SSL Certificate effect Reporting Services Extensi
Posted by Bryan E. at 9/30/2004 12:03:02 PM
Not sure if I should be posting this to the IIS Security as it may be more
closely related to a Reporting Services problem. Unfortunatly I do not see a
managed News group for reporting services.
Basically the problem is that I am getting an error when I try to run a
report on the server tha... more >>
Protecting asp include files
Posted by Jonathan Allen at 9/30/2004 9:40:09 AM
I need a way to protect asp include files. My fear is that a user may
stumble across one, causing who knows what to happen.
As a first step, I want to rename all the include files from .asp to .inc.
Then I want to lock down IIS so that users will get a 404 error whenever
they try to access a i... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Standalone IIS Server prompts for authentication when using Domain Anon User Acct
Posted by ihaveblint NO[at]SPAM gmail.com at 9/30/2004 8:07:15 AM
Hello all,
I'm having some trouble with getting my IIS server working
correctly with anonymous users. Current we have an IIS server sitting
in the DMZ that is not part of the internal Windows domain which needs
to access Active Directory. To gain access to Active Diretory I've
changed the ... more >>
SFTP Server 2003
Posted by Ryan at 9/30/2004 7:59:01 AM
Wondering if it is possible to install SFTP with IIS 6.0 or whether i would
still need to install a third party software.
Thanks for the help.
Ryan... more >>
suspected fraud
Posted by jamarose at 9/30/2004 1:35:43 AM
Dear Sir
Good Day
I have received an e - mail from a certain Fllora Adams (
e-mail address flloradams@hotmail.com ) of the EAAS
Lottery Scam notifying me that I have won $250,000 prize
of the 13th August 2004 Euro - Afro - Asian Sweepstake
lottery International sponsored by Mr. Bill ... more >>
How can I start IIS6.0 service under Domain Account ?(Kerberos)
Posted by Dmitry P. at 9/30/2004 12:01:03 AM
History:
We want to use IIS for Intranet as middletier application with Kerberos
Delegation.
When we start IIS6.0 service under LocalSystem account - Kerberos delegation
dont work. We can see in Event Log that Kerberos Logon was successful to IIS
, but IIS requests SQL Server Database ... more >>
Some users can log on, and other cannot
Posted by Rod at 9/29/2004 2:34:58 PM
We are implementing an ASP.NET application which uses forms authentication
but authenticates using Active Directory in a Windows 2000 domain. (I used
MSDN article 326340 to help me set all of this up.)
I have found that some of my users can log into the new ASP.NET application
just fine, but ... more >>
How to remove the backdoor codes left by EX engineer
Posted by Jack at 9/29/2004 12:26:04 PM
Our Ex engineer left some backdoor code into our web
server and he attacked the server 3 times already via his
backdoor codes. He formated all our data after he broke
into our server every time.
Our server is Windows 2K server and SQL server 2K. Our
web server is ASP based with some V... more >>
Dreamweaver error : The file associated with this document has been moved
Posted by Patrick at 9/29/2004 5:00:46 AM
The error : The file associated with this document has
been moved or deleted
outside of Dreamweaver. You may want to resave the
document before continuing.
The technet article says that this is caused by caching
being enabled on file handles. They have many Dreamweaver
systems that are w... more >>
Getting an access is denied error against a Crystal Reports for VS.NET report
Posted by Rod at 9/28/2004 2:57:41 PM
I've got a Crystal Reports for Visual Studio.NET 2003 that I wrote. Up
until now, I have been able to run it just fine, however, I had to change
the access method to use Active Directory. (It uses forms authentication
but authenticates against Active Directory.) Now, it no longer can run the
... more >>
change http to https
Posted by John McClain at 9/28/2004 1:18:05 PM
A few questions...
1) I have set up a virtual directory under the default web site called
Acuity that points to my web application. I have setup up the Acuity
directory to 'require Secure channel' on the 'Directory Security' tab after
Rclicking on Acuity and choosing properties. I am noticing th... more >>
FTP Server
Posted by Chad Guiney at 9/28/2004 11:49:02 AM
I have setup an FTP server with IIS on a Windows 2000 Server. I am wondering
how I can set it up so that the account I have created that has access to the
FTPROOT dir can only upload files but not download anything. Is this
something I would have to configure on my firewall or is there a way t... more >>
IIS6-IISADMPWD Error
Posted by Wade Schmidt at 9/28/2004 10:54:31 AM
I have setup the IISADMPWD function to change passwords
via a web browser or OWA. Hotfix has been applied for
problem noticed with truncated name.
When an attempt is made to change a password the
following error occurs.
ERROR:
*** Either the password is too short or password
uniqueness r... more >>
IIS Authentication on a Windows 2000 Domain Controller
Posted by Peter at 9/28/2004 8:58:59 AM
I have hosted OWA on a Domain Controller running Windows
2000. When trying to logon I get the following error:
HTTP 401.1 - Unauthorized: Logon Failed
I done the below steps but I'm still not able to logon
http://support.microsoft.com/default.aspx?scid=kb;en-
us;263140&Product=iis50
Any i... more >>
Permissions intractably denied
Posted by kuntakinte NO[at]SPAM roots.com at 9/27/2004 11:10:51 PM
simple setup, simple code, bizarre results.
Client: Windows XP hitting a local NT4 server running IIS 4 sp6
Code run on the client:
<script language=javascript>
var fso=new ActiveXObject("Scripting.FileSystemObject");
var theFile
theFile=fso.CopyFile("//192.16... more >>
Access website from within domain?
Posted by Norb at 9/27/2004 7:25:15 PM
Hi,
Running IIS5 on Windows 2000.
We have a web-site running, accessible from the "outside" as www.yyy.zzz
The question is: Is it possible to access this web-site from within the
domain? Whenever I try to call www.yyy.zzz, I get a login popup. Of course,
I'm authenticated within our dom... more >>
Private to Public...
Posted by Steven at 9/27/2004 2:47:29 PM
Is there ANY way at all to access a private server
through a public server?
Server 1 is accessible via the internet.
Server 2 is not accessible via the internet.
I need to create some sort of link so I may access an
area of server 2 from a web link on server 1.
Please say this is possi... more >>
both anonymous AND windows integrated auth... what is the precedence
Posted by Stephanie Stowe at 9/27/2004 1:32:15 PM
Hi. I am troubleshooting a problem at a customer site. I have never mixed
authentication on servers so I do not know what is supposed to happen. If I
have a server with a site that has anonymous AND windows integrated auth set
up, and a person hits a web page on that site, whose credentials are u... more >>
Configuring IIS 5.0 to change domain user password
Posted by Philip Wang at 9/27/2004 10:10:54 AM
Hi,
I need some advise on how to set up a simple IIS to assist
my users to change their domain user password using IIS.
I understand that I will need to use IISADMPWD.
Appreciate some advise and assistance.
Thanks.
Philip... more >>
Unable to Access Webpage -> "The user has not been granted the requested..."
Posted by schneebie1 NO[at]SPAM hotmail.com at 9/27/2004 8:43:15 AM
I am using basic authentication to grant users access to a secure page
that I am hosting. When they try to log they are unable to. In the
event viewer I get:
Logon Failure:
Reason: The user has not been granted the requested
logon type at this machine
User Name: testuser
Domain: M... more >>
Removing restricted access
Posted by Alice Douzier at 9/27/2004 8:40:19 AM
I need to know how to remove restricted access to a web
site. I initially set the site up for Integrated
authentication. Then, I installed FrontPage Server
Extensions 2002. I thought that I would be able to set
specific users through the Administration Page. However,
this option was not a... more >>
access to HTML data
Posted by Alfonso Benavides at 9/27/2004 8:07:04 AM
Since I've installed windows XP service pack 2 I have no
access to software HTML manuals, HTML CD-ROM books and
databases I've purchased a few years ago.
I guess this is a security configuration problem produced
by the service pack in the internet explorer. I haven't
try with a different br... more >>
IIs Operators
Posted by msnews.microsoft.com at 9/27/2004 1:47:42 AM
I have set up a new web site under iis 5 and everything works great, but I
have a guy that is going to do some of the authoring and when he uses front
page to open the site he gets an access denied error. I set him up as an
operator and gave him permissions to the site under the security tab.... more >>
IIS Kerberos auth for non-domain client
Posted by FreX at 9/26/2004 8:48:13 AM
I setup an env as below:
A w2k3 server sps.xxx.edu is running IIS(SharePoint Server
installed), it's in domain xxx.edu, not controller.
A unix kdc for realm: REALM.xxx.edu, necessary princs
created using enctype:des-cbc-crc.
A domain controller ad.xxx.edu, w2k3, 2-way trust with
unix realm ... more >>
security prob when accessing restricted webpage
Posted by Mr. T. at 9/25/2004 5:00:10 PM
Hi,
i have a IIS 6 on Windows 2003.
On one of the websites i host, they have one ASP they use for entering data.
They wanted to secure that one page. So i made a user with a password, then
in the Windows Explorer on the security settings of that ASP i removed the
IIS_USER and added the new... more >>
IISADMPWD through Firewall
Posted by Samuel Krüger at 9/25/2004 2:47:11 PM
Hallo,
I have problems to get IISADMPWD work through a firewall. The Account Domain
ist on the internal Network and the IIS 6 with IISADMPWD + Exchange 2003 (FE
OWA) is in a DMZ. I have enable IISADMPWD an Users can access this site over
OWA and HTTPS. But Password Changes can't be made. The A... more >>
UNWANTED DESKTOP BOXES
Posted by LLOYD at 9/24/2004 1:36:24 PM
RECENTLY, TWO BOXES HAVE BEGUN TO APPEAR ON XP DESKTOP ON
STARTUP. THEY ARE ON UNRELATED PROGRAMS AND DID NOT START
SHOWING UP AT THE SAME TIME. CLEARING THEM FROM THE
DESKTOP PRIOR TO SHUTDOWN DOES NOT KEEP THEM FROM
REAPPEARING ON THE NEXT STARTUP. ONE OF THE BOXES
IS "WINDOWS XP STAR... more >>
IIS 6 Default Domain
Posted by Davie at 9/24/2004 11:04:19 AM
I have recently upgraded a WinNT 4 Web Server to 2003.
On NT4 the server was in a workgroup of its own, on upgrade it is a member
of an Active Directory domain.
I have an area of the site which requires users to log on. The area is
configured to use integrated windows authentication, with a... more >>
Users not able to log on -> Logon failed due to server configuration
Posted by schneeberger NO[at]SPAM gmail.com at 9/24/2004 10:40:26 AM
I had a similar post earlier but this is more descriptive of the
problem:
Something is wrong with the way users are authenticating to my IIS. I
set up a test user called 'testuser.' I want the user to be able to
log into the internal homepage. When I try to log onto the internal
homepage, I e... more >>
Anonymous logon and ISAPI in IIS 5
Posted by Alex at 9/24/2004 10:25:03 AM
Hi. I have a website configured for windows integrated authentication with
Anonymous access enabled (using default IIS anonymous user account). On this
website I have "isapi" sub-folder and in it "MyIsapi.dll". Directory/file
security for both is the same as for the rest of the site. NTFS per... more >>
Shared documents/attachments
Posted by Eirik at 9/23/2004 3:23:07 PM
Hi
When attaching a document in Outlook you get the option to share this
attachment in a work space. How does one make this work? What needs to be
set up, and how?
Running Win2k3, Exch2k3.
Any help appreciated.
Eirik
... more >>
The recommended way to setup a large FTP site
Posted by David Raskino at 9/23/2004 1:03:07 PM
I would like some pointers on the recommended way to setup a large MS FTP
website such that:
(1) Domain and local users can use the website
(2) User/Group administration is easy.
I have looked for many models that offer both, but have found none. Surely
there must be one out there.
Any s... more >>
Error
Posted by Curious at 9/23/2004 7:25:39 AM
Has anyone seen this error before-
The account that the current worker process is running
under does not have SeTcbPrivilege privilege, the
anonymous password sync feature and the Digest
authentication feature are disabled.
How can I correct it.... more >>
Windows Integrated Authentication passed through a reverse proxy
Posted by javacrack NO[at]SPAM hotmail.com at 9/23/2004 4:17:44 AM
Hi
I've got a Sharepoint 2003-Server which runs with integrated windows
authentication. Now I want to allow some customers to access that
server. The problem is that they have to authenticate through a
reverse-proxy (Novell iChain). Now I don't want that they have to
re-enter their user-crede... more >>
Need IPSec Help
Posted by George J at 9/23/2004 2:40:04 AM
Hello,
I've set up an IIS 5 webserver running http, ftp, and smtp. I've assigned an
IPSec policy to accept connections to the following ports: 20, 21, 25, 53
(tcp and udp), and 80. I can connect to the website fine, and ftp in also,
but the smtp server is not able to send email msgs. They hang... more >>
.NET framework 1.1 SP1 MIME/Content-type problem
Posted by Aleks at 9/22/2004 8:42:15 PM
Hi all,
since i patched my server to the .NET framework 1.1 SP1 rss on my web site
(http://www.Dotnet-Project.com) cannot diplay its content.
By looking to the headers, i can see that the content-type header is not
present and the content-lenght is equal to 0.
I am sure that this problem ... more >>
iis 6 http redirected to https?
Posted by Delali Dzirasa at 9/22/2004 5:13:24 PM
I am using iis 6 on a W2K3 box .....I have set up my first SSL site....and
when I point my browser to https://localhost/
I get my page, but when I it is pointed to http://localhost/ I just get an
error saying that I need to type a "s" after the "http" because it is secure
.. How can I set up ii... more >>
Web Server - User Access and Priviledges.
Posted by The Poster at 9/22/2004 3:15:59 PM
G/Day Forum,
I'm currently hardening access to all my IIS 5.0 and IIS 6.0 servers, that
are located within multiple DMZ environments in multiple locations.
All servers are Firewalled and are administered through VPN's using Terminal
Services/RDP. Recently, I encountered a (self induced)p... more >>
ftp
Posted by Gerald at 9/22/2004 2:32:25 PM
how secure is the ftp that comes with sindows xp pro and
also looking for information on best practice in
configurinig a secure ftp server.... more >>
SubDirectory Anonymous Permissions
Posted by Janet at 9/22/2004 8:28:39 AM
In IIS4, I had a subdirectory that restricted access to
one user account requiring login/pwd; but under that,
another subdirectory that gave permission back to the
anonymous account not requiring login/pwd.
I can't get this to work in IIS6. I've checked directory
permission in IIS and ma... more >>
SSL and Server Windows 2003
Posted by zturtle at 9/22/2004 8:21:16 AM
When I try to request a certificate from the CA
authority
Web enrollment page(same server as iis is installed
member server to domain)I get this error:No certificate
templates could be found. You do not have permission to
request a certificate from this CA, or an error ... more >>
Kerberos not being used, only NTLM - Login failed for user '(null)'
Posted by doogie_of_oz NO[at]SPAM hotmail.com at 9/22/2004 12:11:42 AM
We have a Win2K3 Server running an ASP .NET application that connects
to a Win2K3 server running SQL 2000 on the backend.
Whenever a user opens the application page in their client browser
they get the error message:
"The following error occurred whilst loading the page: Login failed
for user... more >>
File WRITE permissions in IIS 5.1/XP SP2
Posted by Joel at 9/21/2004 8:49:20 AM
I have Windows XP installed on my home computer, and am
using it for website development. I had the "site" set up
for anonymous authentication. I recently upgraded to
Windows XP SP2, and it looks like I also got upgraded to
IIS 5.1 in the process.
After I upgraded, IIS was actually not ... more >>
problem after upgrade
Posted by Bill at 9/20/2004 8:50:48 PM
To All:
I recently upgraded to Server 2003 from NT
4.0.....During the upgrade it upgraded me from IIS 5.0 to
IIS 6.0. Now I can call my perl scripts, but for some
reason I have lost the ability to create a directory or
create a files. Does anyone have any suggestions?
Thanks,
Bil... more >>
|