all groups > iis security > october 2005
Filter by week: 1 2 3 4 5
IIS6.0 Log file location
Posted by Sachin at 10/30/2005 10:02:38 PM
I have an ASP.NET Web Application deployed under a Web Site in IIS 6.0.
I want to set the log file locatin to some folder, say C:\Logs\MyApp through
scripts?
How can I do this?
I am using IISWeb.VBS script to create the Web Site.
TIA
Sachin
... more >>
URLScan and Server Variables - ASP.NET
Posted by KarthikR79 NO[at]SPAM gmail.com at 10/30/2005 4:56:46 PM
Hello
I am using ASP.NET v1.1, IIS 5.0, URL Scan (URL Scann DLL Version
6.0.3615.0).
I use server side variable in .aspx pages as follows:
Say in '/VirDir/SubDir/Login.aspx' page - I have the following image:
<img src="<%=mapPath%>/img/icons/logo.gif"> - Where mapPath is the
server var... more >>
Advanced Digest Authentication Failure
Posted by Ralish at 10/29/2005 12:00:00 AM
Hello,
An IIS 6.0 server setup on a Windows Server 2003 Domain Controller is no
longer successfully authenticating clients. The server is set to
authenticate clients using Advanced Digest Authentication, and has been
working flawlessly for the past few months. However, now whenever a client... more >>
Problem with 2 way ssl
Posted by Curtis Ransom at 10/27/2005 12:47:10 PM
I am trying to set up 2 way ssl with iis 6. I install the server cert, turn
on ssl and click "require a client certificate." Well, when I hit a web site
on the server from a browser, the server pushes it's cert to the client, but
does not ask the client to send one. The "Choose a digital ce... more >>
windows authentication
Posted by Colin Bondi at 10/27/2005 10:47:21 AM
I have a question about IIS securty. If you disable anonymous access and
choose only integrated windows authentication, should you be prompted for a
username and password when accessing that site from a domain computer
running IIS? Or should IIS pass the credentials of the currently logged on ... more >>
Newbie to IIS - Need some help please
Posted by buddd at 10/27/2005 4:29:12 AM
Hello,
I am quite new to IIS and I could use some assistance. I am running IIS
on Windows 2003 Server (Enterprise).
Here is what I would like to accomplish:
1. A single public IP address and point to different web servers.
2. Encryption / security (I know point one does not support SSL)
... more >>
Smartcard-Webauthentication: Changes in IIS 6.0?
Posted by e9025902 NO[at]SPAM stud2.tuwien.ac.at at 10/27/2005 12:38:51 AM
Hi there!
I am testing Smartcard-Authentication with our Webapplication
on IIS 5.0 and IIS 6.0 and found the following different
behaviour: with IIS 5.0 the Smartcard PIN is asked several times
on each Page, while with IIS 6.0 the PIN is asked only once.
IIS 6.0 seems to cache the PIN or ra... more >>
IIS Kerberos/SPN Help
Posted by Craig Taylor at 10/27/2005 12:00:00 AM
We have an IIS Webserver running on Windows 2000 as part of our domain. Its
netbios/dns name is webserver nad I can connect through a browser to this
address and authenticate using Kerberos OK.
However I have set up an dns alias intranet.theforwardgroup.com to point to
this server but it fails t... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
IIS using Kerberos: Excessive nettwork traffic
Posted by ameneon at 10/26/2005 12:33:47 AM
Hi,
We are currently switching from NTLM to kerberos on a large portal
installation which uses the IIS for SSO purposes. This is a clustered
solution so we've set a domain users as the owner of the IIS app pool
and configured the SPN so it can issue tickets on the cluster address.
We've verif... more >>
Certsrv Page not authenticating with IE
Posted by BCW at 10/25/2005 7:18:52 PM
I have an XP Pro client with a user logging on who is in the Domain Admins
group. There is only one DC, server01 in tailspintoys.com. The DC is also
a certificate server and Exchange server for coursework. When I try to get
a certificate at http://server01/certsrv my authentication fails using... more >>
Code runs until Basic Authentication or Digest Authentication is r
Posted by BMeyer at 10/25/2005 12:22:01 PM
We have Windows 2003 server running IIS 6.0.
Have an application that creates ASPX session variables based on values
found in ASP session cookie.
Works great if anyonymous is allowed. Once Basic or Digest Auth is
required, we get 401 errors. We've even included a default user account
... more >>
Changing PAssword
Posted by Randaddyz at 10/25/2005 12:16:04 PM
Hello,
I need to change the admin password on our IIS server. When I change the
password my website goes down. When I put it back to its orginal password
everything comes back online. Any ideas why this happens???
--
Ever Learning Net Admin... more >>
IIS 6.0 best practices
Posted by Ren at 10/25/2005 11:40:02 AM
Does anyone have suggestions on best practices for security, and optimization
for IIS 6.0... more >>
Authentication Problems
Posted by Barry at 10/25/2005 11:25:06 AM
Have recently migrated my server from W2K to a W2K3 platform, and everything
is functional on my site but I have one minor issue that I would like some
help with.
I'm running a W2K AD domain with my W2K3 server as a member server. Client
computers are either WinXP or W2K Systems, fully pat... more >>
My web forms will not allow users to submit.
Posted by Loyal at 10/25/2005 8:02:02 AM
I upgraded from server 2000 to standard 2003. I can get all of my Intranet
to work with exception to web forms. The users are asked to submit a user
name and password to complete. In the past they have never been asked to do
this. Also the only user name and password the site will take is ... more >>
IIS 6.0, Old Credentials
Posted by John Osborn at 10/24/2005 10:56:00 PM
Hello,
After changing usernames on our Active Directoy network, old credentials
are still being passed to our asp.net pages. A server reboot fixes the
issue but, as you can imagine, this is unacceptable. Any help would be
great.
Thanks... more >>
IIS ignoring NTFS Deny Permissions
Posted by Ishmealm at 10/24/2005 3:28:04 PM
Hi,
I'm running IIS 5.0. I have a virtual directory that resides on
another server. The folder that the virtual directory connects to has Share
permissions of Everyone "Change" and NTFS perms of 4 groups:
Admins- Full Control
Group1- Modify
Group2- Deny (Full Control)
ConnectAsSVCAC... more >>
Integerated Authentication Not Work?
Posted by Richard Morey at 10/24/2005 12:41:51 PM
Hi --
We have two servers in our office running Active Directory. One is a Windows
/ Exchange 2003 server and the other is a Windows 2000 box. My client PCs
are all running XP Pro, SP2 and log in to the domain controller.
I have set up our corporate intranet on the Windows 2000 machine. I ... more >>
Login Prompt for remote connection
Posted by Kenneth Koh at 10/23/2005 12:00:00 AM
Hi all
We have a terrible situation now. We have 3 new web servers (IIS6.0) in the
same domain, each hosting a different web site, e.g. http://companyintranet,
http://hrapp and http://payrollweb . In the LAN environment, the users have
not problem logging into the different sites silently... more >>
Pfx import for SSL problem
Posted by pj_servadmin at 10/21/2005 9:51:06 AM
We have 2 NLB 2003 SP1 webservers, and we have a site that SSL works fine on
one of the NLB servers (the one the CSR originated from), but does not work
on the other.
In order to get a certificate for a site, we make the CSR on one of the
servers. When we get back the cert it is installed t... more >>
500 Invalid PORT command
Posted by jan at 10/21/2005 2:41:04 AM
Hi, I create two FTP sites on the IIS 5.0. And first FTP site port 21, and
second FTP site port 4999. And also i create 3 virtual directory in the
second FTP site.
We use ADSL internet connection. I open these ports from ADSL modem to reach
these FTP sites from WAN. First FTP site which use... more >>
IIS Log Files logs 401 HTTP Codes
Posted by Jagjeet Chahal at 10/21/2005 12:00:00 AM
Hello All,
I have a small ASP.Net Web application with a single aspx page.
Following code is written in page load of the Webform1.aspx
private void Page_Load(object sender, System.EventArgs e)
{
// Put user code to initialize the page here
Response.Write("Logged user is " + User.I... more >>
Implementing Singleton in ASP.Net
Posted by RaVs at 10/20/2005 5:19:01 PM
I was not sure where to post this question. This discussion group seemed most
appropriate. If any one things otherwise can they please redirect me to the
right discussion group?
Here qoes the question anyway...
I have built an ASP.net application that uses the singleton pattern to keep
o... more >>
http logs in shared hosting environment
Posted by fred at 10/20/2005 4:46:05 PM
I'm a UNIX guy, and had a windows 2003 web edition server dropped in my lap.
It's going surprisingly well, with the exception of a log issue. The
machine is a shared hosting environment, under IIS6, and I can't seem to
find a way to allow customers to view their http logs. I am logging in th... more >>
intermittent failures for web service
Posted by IIS Administrator at 10/20/2005 3:26:12 PM
I am running windows 2003 enterprise edition sp1 with IIS 6.0 and Oracle
client 9.2.0.1.0
When I run an application that connects to a web service located on this
machine I receive intermittent failures. CPU usage will spike to 100% and
the web service will not return control to the client... more >>
How do I change the default web page?
Posted by LinuxMan at 10/20/2005 10:11:04 AM
My Background: Linux / Netware / Unix
O/S: Microsoft Small Business Server 2003 SP1
Configuration:
* Single NIC
* 3rd party firewall in front of it with port forwarding. Classic DMZ setup.
* firewall is forwarding ports 25/80/443/444 to server
* ran "connect to internet" wizard and set it ... more >>
Looking for an article on identities used in IIS 6.0 web applicati
Posted by Chris Cichocki at 10/20/2005 8:09:05 AM
I'm looking for an article that would explain the request processing that
goes on in IIS 6.0. For example, when a request is received, it starts a new
process by running w3wp.exe and it is started with the identity specified in
the Application Pool settings. But then if you request a file, t... more >>
need default iuser password for iis 6.0
Posted by radial NO[at]SPAM gmail.com at 10/20/2005 6:36:01 AM
I had to change the anon account a web site used, now i want to change
it back to iuser_machinename but i dont know the password.
The searches i've done showed i can tell the password using the
metabase, and i got the metabase explorer but cant find users in there.
i have found wehre you ca... more >>
virtual server authorization
Posted by Aric at 10/19/2005 9:00:49 PM
I am currently about to launch an ecommerce solution for my company an
was wonder about securing the administration section. Currently th
plans are to have the administration site in a virtual server usin
windows authentication and restricted to local ips only. While lookin
at all the documen... more >>
Change IUSR password...
Posted by Dave DeCoursey at 10/19/2005 8:43:19 AM
Hi,
I had to change the password to the IUSR account and I thought I got
everything updated, but I'm still getting logon errors in my security log.
The web sites seem to function OK, but these errors bother me. Any idea
where I can look to see what is really creating the error and where... more >>
Get ROOTDSE via ASP receive error: 8007054b
Posted by Daniel Di Vita at 10/19/2005 7:48:12 AM
We are developing web pages in ASP classic on an IIS5 server. We are having
an issue on our Production server that we are not seeing on our Development
server. Here is the code first of all:
<%@LANGUAGE="VBSCRIPT" CODEPAGE="1252"%>
<%
'we created a DLL that will allow us to impersonate an a... more >>
IIS 6.0, Host Headers and SSL
Posted by Tymbow at 10/19/2005 2:18:02 AM
I have a client that for various reasons can only have one IP address,
however they need to seperate SSL enabled web sites. I followed the Technet
Article at
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/596b9108-b1a7-494d-885d-f8941b07554c.mspx.
The wilcard cer... more >>
Building a Windows 2003 DMZ Server without ISA
Posted by johnpaul.temple NO[at]SPAM gmail.com at 10/19/2005 2:02:51 AM
hi
I am planning on building a Windows 2003 Web Server and placing into a
DMZ, with CISCO PIX on each side.
I have found only a few documents that describe how to configure the
Windows Server without using ISA. Has anyone got any tips or
suggestions for this sort of scenario?
We don't h... more >>
asp.net and IIS 6, access denied to the web directory.
Posted by Slim at 10/18/2005 2:35:02 PM
Ok. Lets say I am running website called dev.mysoftware.com.
In IIS, I have home directory set to C:\Inetpub\wwwroot\dev.mysoftware.com
When I open the site, I get the error:
==================================================
Server Error in '/' Application
-----------------------------------... more >>
Can no longer access IIS 5.1
Posted by No_Spam at 10/18/2005 12:32:23 PM
After I installed the latest Microsoft security patches on my Windows
XP Pro (dated 10/11/05), I'm no longer able to access IIS console.
When I open IIS console, my server is no longer exists, and when I try
to connect to it it says I don't have permissions to it, although I'm
logged in as admin... more >>
Securing IIS IUSER
Posted by Pritchie at 10/18/2005 9:31:29 AM
> "Pritchie" <info2005@remove-this-including-dot.bigbunker.com> wrote in
> message news:dpO4f.3413$sm1.224@newsfe5-win.ntli.net...
> > Hi,
> > I want to restrict IUSER access to the server file system. I removed it
> > from the "Users" group and added it to the "Guest" group. Thinking that
> ... more >>
DCOMCnfg permissions for application
Posted by Allison Sutherland at 10/17/2005 1:01:02 PM
Windows 2003 Server, SP1, IIS6
Primary Web Server.
Special Dashboard Intranet application requires:
1. OfficeAutomationuser to be created.
2. Dcomcnfg - requires user to be added to Word Document application to
Default Access Permissions and Default Launch permissions.
DComcnfg - to Conf... more >>
Windows Authentication - Urgent
Posted by newbie sql at 10/17/2005 10:03:18 AM
I have an application running on IIS on box A. Within IIS I am using a folder
which is a shared folder on other machine B. Again the authentication is
Windows only for this and all the authentication is thru Domain users.
My problem is if I try to access files on Machine B thru Internet Explo... more >>
Configuration Error with IIS 6.0
Posted by vmas at 10/17/2005 8:55:12 AM
Hi,
I am trying to deploy set of Web Services on IIS 6.0 / Windows Server
2003.
I have two websites running on IIS. one listening at default 80 & the
other at port #: 8181.
When i try to access some of the web services from Web Site listen at
8181 i get the following error.
I am tryin... more >>
IIS and Disaster recovery
Posted by Doug at 10/17/2005 12:00:00 AM
Hello. I work for a university and we're looking at disaster recovery for
our WWW server in the event of a catastrophic event. The main thing is
having the ability to give instructions to parents; phone number, email
addresses, other info.
The one option that has come up is having a remote ... more >>
W2k3 - Service Pack 1 Install - now outside world can't see webpag
Posted by ebtsup at 10/16/2005 1:16:04 PM
Installed service pack 1.
* Internal users can see web site.
* External users on same T1 can see website.
* All other external users.. can not.
> Websites do work.
> The I/P resolve... but the page never renders.
> If you go in from external processing.. everything works just.
> EVERTYHING wa... more >>
limiting access to files with asp.net
Posted by Daniel at 10/14/2005 4:58:55 PM
limiting access to files with asp.net
is there any way i can make a file only accessible to certain users of my
website? my files are to large to copy to a temp directory and they are of
many types, .exe .xsl .xml etc. i want an href to each file but only allow
users who have the right login-i... more >>
CGI Apps can't perform system commands (IIS 6.0 / Windows Server 2
Posted by Nate at 10/14/2005 8:33:04 AM
None of the CGI apps (Perl and ASP) on my site can perform system commands
(dir, del, copy, etc.) for most users. I am running IIS 6.0 on Windows
Server 2003. I have an app pool set up for the virtual directories that need
this functionality. The identity for that pool is local system. Eac... more >>
SSL and Client Authentication
Posted by arijan at 10/14/2005 12:46:04 AM
I have two machines with 2k3, I one I setup Stand-alone CA and in the
other one WEB page,
I am requesting web cert. from CA , and then I am installing it, and
then from another Comp. running XP I am trying to request Client cert.
where I install this cert, and I go and map this cert on IIS to lo... more >>
Install/Use UrlScan on 6.0?
Posted by Eric George at 10/13/2005 11:28:13 PM
Hi there,
A question that probably has been here a thousand times. I'm
running IIS 6.0 and will be using it for development of dynamic content
on Professional 64-bit. I read:
http://www.microsoft.com/technet/security/tools/urlscan.mspx
but am still not sure if I should use it. Basically can a... more >>
IUSER on Cluster
Posted by LionPaw at 10/13/2005 9:19:09 PM
Running an active/passive cluster with a shared drive cluster resource S that
holds the web sites pages.
When Server 1 is serving pages IUSer_Server1 runs the site
When The cluster rolls and Server 2 is serving the pages IUSER_Server2 is
used.
THe trouble is that the ACLS on the Shared S D... more >>
Changing from self-signed certificate to a trusted CA
Posted by Michael Cattaneo at 10/13/2005 9:16:22 PM
I currently use a self-signed cert on my 2003 server w/ exchange for OWA and
RPC over HTTP. Works great! ... now my client has wireless phones that
cannot use the self-signed cert.
Is there a way to request a cert from a "real" CA without having to remove
the current one (which will bre... more >>
IIS 6 URL Authorization Erroe 518
Posted by Hink at 10/13/2005 9:13:58 PM
Every now and then I receive a 518 (URL authorization store cannot be opened)
error. All ACL's are correct on the AzPolicy.xml file. Based on a MS
TechCenter article, I ran the File Monitor utility and it reports a "Sharing
Violation" on the AxPolicy.xml file each time I receive this error. ... more >>
CDO Permissions
Posted by Mendoza at 10/13/2005 9:47:45 AM
I have a script written in ASP/VBScript running on Windows 2003/IIS6. The
Script uses CDO to send an email message. When I use the Default Application
pool, using "Network Service" as the Identity, CDO works great. However, when
I change the application pool to one that uses a configurable i... more >>
Script only runs from Default webistec
Posted by Jody at 10/12/2005 11:27:02 AM
RE: Windows 2003 Server SP1 / IIS 6.0
I can successfully run two a perl script files from my default website but I
can not run the same files from another website.
I have verified that the permissions for the wwwroot and cgi-bin sub folders
in both the ‘Default’ and ‘mywebsite’ are... more >>
|