Hello, I'm trying to lock down a Win2K server (Svc. Pak 4) for use as a web server and want to be as thorough as possible. I'd like to use TCP/IP Filtering, but have run into a snag. I have it set so that the following TCP ports are permitted: 21, 25, 53, and 80; and also UDP port 53. The prob...more >>

Hello, I am using Server 2003 and was trying to create a new cert request. When I finish and the request is just about to be generated I get the wizard saying: cannot generate request access denied. Well never have seen this one before. I removed the machine name cert that is installe...more >>

Hi all, I am a security engineer (new to the newsgroup) who just completed an Cold Fusion application security assessment. I found that the "application" was really a portal to multiple CF applications with single signon (SSO) implemented in CF. The web server is obviously IIS. The CF SS...more >>

Hi I am having a problem with my host at the moment and wondered if anyone could help. I am trying to use a script that uploads an image to a directory. I need to allow the directory to allow write permissions. I have done this fine with my last host but having major probs with this one. ...more >>

I have a user that cannot access Outlook Web Access from within our organisation or external. Internally She opens IE and types in servername/exchange She is being prompted for the User Name, Password and the Domain, which she should not be. Even if she does put in her details correctly sh...more >>

Trying to set up a site with both integrated and basic authentication enabled (anonymous disabled of course). When working on local network I want integrated auth. to act, and it does, no problem. Accessing site from outside of local network Basic auth. should kick in, and it does, no problem. ...more >>

Our intranet should now also be reachable from the internet, for our "on-the-move" technicians. I've configured the intranet site in IIS 6 with an SSL certificate and removed the anonymous www access. Using "Digest autentication for windows domain servers" and realm "our.lan". When access...more >>

IIS-5.1 ISAPI dll - "The page cannot be displayed" after XP - SP2 install On my XP-Pro localhost, this worked fine before SP2 install: Clicking the Submit button on a localhost web page would execute the clogin.dll. <form name="CSLogin" method="POST" action="../CGI-WIN/clogin.dll"> In...more >>

Hi, I just installed IIS 5.1 and it works wel on IE 6.0 but when i try to access http://localhost on Mozilla 1.6 it asks me for a user name and pass word. I tried using my Windows user name and password but it doesn't work. I also went to IIS on Administrative Tools to change the security se...more >>

I am setting up a new W2K3 server with multiple WWW sites that require FrontPage extensions and FTP access for web publishing. The dir structure is /InetPub/Site1, /InetPub/Site2, /InetPub/Site3, etc.. The original plane was to have /InetPub/FTPhome folder as FTP server's root, and then to...more >>

Somebody please tell me how to close my hotmail account.. Someone has gotten into my account and changed my password along with my secret question and answer, he is sending out disgusting and very horrible emails from "me" which aren't actually from me. I have another account luvablet18@h...more >>

I Still have problems. Now I have two win 2k server, one with IIS and one with Sql Server 2k. When I try to access from a client with 2k professional i have this error: Error Type: Microsoft OLE DB Provider for ODBC Drivers (0x80040E4D) [Microsoft][ODBC SQL Server Driver][SQL Server]Login...more >>

I was thinking of using SSL on my webserver - and looked it up: http://support.microsoft.com/default.aspx?scid=kb;en-us;299525 Would someone explain to me how a cerficate functions and what it is doing behing the scenes. I assume all the data is encrypted then decrypted at the client end - ...more >>

I am now unable to log on to links on my email. If I try, my system locks up totally and I have to use CTRL - Alt _ Del to get ou and then use the End Task box to escape. I have been eliminating Spyware because of problems like this. To be clear, I had this problem before I started to de...more >>

Windows Server 2003, FrontPage 2002. I get the following error in the Application Event Log when I try to submit an email form: Error #3005f Message: Unable to read configuration for Microsoft Internet Information Server. It is accompanied by an informational message: Microsoft FrontPage S...more >>

I am trying to post an Excel page that is saved as an HTML file using an SSL connection. I am also using a self signed certificate I created myself for the SSL connections. When you initially open the page a box appears stating you are about display secure and Non secure information. Do y...more >>

I am trying to setup Certificate server for SSL on IIS and OWA to work with IE6. It work with IE4 and 5 but not 6. I understand from Microsoft Knowledge Base Q28333 and Q311227, there is problem of not recognize IE6. After applied the change in Browscap.ini, the Advance button appear on IE6 ...more >>

I have two webservers running on my machine. I need IIS to not run on the standard ports (80,443). I have successfully changed http from 80 to 8080 via Internet Information Services...but when I go into Advanced...Multiple SS Identities for this website, I can't select the single 443 row to ...more >>

I have two webservers running on my machine. I need IIS to not run on the standard ports (80,443). I have successfully changed http from 80 to 8080 via Internet Information Services...but when I go into Advanced...Multiple SS Identities for this website, I can't select the single 443 row to ...more >>

I will setup public website with SSL on IIS 6 of Windows Server 2003. Do I really need a certificate from VeriSign or other third parties? Thanks....more >>

Guys, Recently I had to disable remote access to my webserver. I left all the security permissions in place, just disallowed non-local access. It was a simple setting change. However, now I can't turn remote access back on. I haven't been able to find the setting again. Please he...more >>

Hello sir, I am unable to create a client certificate. How to go about to create a client certificate. Sir i have created a web server certificate and installed in my web server from verisign. when i am trying to access that page using https:// it says HTTP 403.7 - Forbidden: Clien...more >>

have a small question with regards to SSL and IIS. i've already installed a self signed ssl cert on my web server. My question now is, i've a page with has a form. This page is unencrypted. But in this page, it has a form and that form will post to a SSL page when its submitted. Will the dat...more >>

Hi, IIS raises login dialog box prompt on browser for resources protected using basic authentication. That login prompt gives user 3 attempts to enter correct userid/password. IIS throw 401.1 error if third attempt fails. Does anyone know how to change this number of attempts. Is it pos...more >>

I am having problems with some web pages on my new windows server 2003 standard. Certain people are being prompted for username and password when trying to access the homepage of out local intranet. The credentials of the users are trying to be authenticated by the web site instead of by...more >>

NetworkService, Local system, Local service all need permission and these need to be applied. I can't find amything consering this. Could really use some help. I like to lockup the webserver. What are the best ways on creating a Web server in active directory? ...more >>

Hi all, I have a soap application that shells an executeable and all works fine in IIS 5 on Win2K but on Win 2003 IIS6 it fails. I have not been able to find any information on how to enable it so any help would be appreciated. Bob...more >>

I'm not that well versed in IIS, but we've run into a problem that I can't seem to figure out. We have a very simple site that was created in ColdFusion (I know...I know...) that was working just fine...until...a co-worker tried to undo IIS lockdown...as you all probably know...this caused many ...more >>