Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
all groups > iis security > october 2005

Filter by week: 1 2 3 4 5

IIS6.0 Log file location
Posted by Sachin at 10/30/2005 10:02:38 PM
I have an ASP.NET Web Application deployed under a Web Site in IIS 6.0. I want to set the log file locatin to some folder, say C:\Logs\MyApp through scripts? How can I do this? I am using IISWeb.VBS script to create the Web Site. TIA Sachin ...more >>


URLScan and Server Variables - ASP.NET
Posted by KarthikR79 NO[at]SPAM gmail.com at 10/30/2005 4:56:46 PM
Hello I am using ASP.NET v1.1, IIS 5.0, URL Scan (URL Scann DLL Version 6.0.3615.0). I use server side variable in .aspx pages as follows: Say in '/VirDir/SubDir/Login.aspx' page - I have the following image: <img src="<%=mapPath%>/img/icons/logo.gif"> - Where mapPath is the server var...more >>

Advanced Digest Authentication Failure
Posted by Ralish at 10/29/2005 12:00:00 AM
Hello, An IIS 6.0 server setup on a Windows Server 2003 Domain Controller is no longer successfully authenticating clients. The server is set to authenticate clients using Advanced Digest Authentication, and has been working flawlessly for the past few months. However, now whenever a client...more >>

Problem with 2 way ssl
Posted by Curtis Ransom at 10/27/2005 12:47:10 PM
I am trying to set up 2 way ssl with iis 6. I install the server cert, turn on ssl and click "require a client certificate." Well, when I hit a web site on the server from a browser, the server pushes it's cert to the client, but does not ask the client to send one. The "Choose a digital ce...more >>

windows authentication
Posted by Colin Bondi at 10/27/2005 10:47:21 AM
I have a question about IIS securty. If you disable anonymous access and choose only integrated windows authentication, should you be prompted for a username and password when accessing that site from a domain computer running IIS? Or should IIS pass the credentials of the currently logged on ...more >>

Newbie to IIS - Need some help please
Posted by buddd at 10/27/2005 4:29:12 AM
Hello, I am quite new to IIS and I could use some assistance. I am running IIS on Windows 2003 Server (Enterprise). Here is what I would like to accomplish: 1. A single public IP address and point to different web servers. 2. Encryption / security (I know point one does not support SSL) ...more >>

Smartcard-Webauthentication: Changes in IIS 6.0?
Posted by e9025902 NO[at]SPAM stud2.tuwien.ac.at at 10/27/2005 12:38:51 AM
Hi there! I am testing Smartcard-Authentication with our Webapplication on IIS 5.0 and IIS 6.0 and found the following different behaviour: with IIS 5.0 the Smartcard PIN is asked several times on each Page, while with IIS 6.0 the PIN is asked only once. IIS 6.0 seems to cache the PIN or ra...more >>

IIS Kerberos/SPN Help
Posted by Craig Taylor at 10/27/2005 12:00:00 AM
We have an IIS Webserver running on Windows 2000 as part of our domain. Its netbios/dns name is webserver nad I can connect through a browser to this address and authenticate using Kerberos OK. However I have set up an dns alias intranet.theforwardgroup.com to point to this server but it fails t...more >>



IIS using Kerberos: Excessive nettwork traffic
Posted by ameneon at 10/26/2005 12:33:47 AM
Hi, We are currently switching from NTLM to kerberos on a large portal installation which uses the IIS for SSO purposes. This is a clustered solution so we've set a domain users as the owner of the IIS app pool and configured the SPN so it can issue tickets on the cluster address. We've verif...more >>

Certsrv Page not authenticating with IE
Posted by BCW at 10/25/2005 7:18:52 PM
I have an XP Pro client with a user logging on who is in the Domain Admins group. There is only one DC, server01 in tailspintoys.com. The DC is also a certificate server and Exchange server for coursework. When I try to get a certificate at http://server01/certsrv my authentication fails using...more >>

Code runs until Basic Authentication or Digest Authentication is r
Posted by BMeyer at 10/25/2005 12:22:01 PM
We have Windows 2003 server running IIS 6.0. Have an application that creates ASPX session variables based on values found in ASP session cookie. Works great if anyonymous is allowed. Once Basic or Digest Auth is required, we get 401 errors. We've even included a default user account ...more >>

Changing PAssword
Posted by Randaddyz at 10/25/2005 12:16:04 PM
Hello, I need to change the admin password on our IIS server. When I change the password my website goes down. When I put it back to its orginal password everything comes back online. Any ideas why this happens??? -- Ever Learning Net Admin...more >>

IIS 6.0 best practices
Posted by Ren at 10/25/2005 11:40:02 AM
Does anyone have suggestions on best practices for security, and optimization for IIS 6.0...more >>

Authentication Problems
Posted by Barry at 10/25/2005 11:25:06 AM
Have recently migrated my server from W2K to a W2K3 platform, and everything is functional on my site but I have one minor issue that I would like some help with. I'm running a W2K AD domain with my W2K3 server as a member server. Client computers are either WinXP or W2K Systems, fully pat...more >>

My web forms will not allow users to submit.
Posted by Loyal at 10/25/2005 8:02:02 AM
I upgraded from server 2000 to standard 2003. I can get all of my Intranet to work with exception to web forms. The users are asked to submit a user name and password to complete. In the past they have never been asked to do this. Also the only user name and password the site will take is ...more >>

IIS 6.0, Old Credentials
Posted by John Osborn at 10/24/2005 10:56:00 PM
Hello, After changing usernames on our Active Directoy network, old credentials are still being passed to our asp.net pages. A server reboot fixes the issue but, as you can imagine, this is unacceptable. Any help would be great. Thanks...more >>

IIS ignoring NTFS Deny Permissions
Posted by Ishmealm at 10/24/2005 3:28:04 PM
Hi, I'm running IIS 5.0. I have a virtual directory that resides on another server. The folder that the virtual directory connects to has Share permissions of Everyone "Change" and NTFS perms of 4 groups: Admins- Full Control Group1- Modify Group2- Deny (Full Control) ConnectAsSVCAC...more >>

Integerated Authentication Not Work?
Posted by Richard Morey at 10/24/2005 12:41:51 PM
Hi -- We have two servers in our office running Active Directory. One is a Windows / Exchange 2003 server and the other is a Windows 2000 box. My client PCs are all running XP Pro, SP2 and log in to the domain controller. I have set up our corporate intranet on the Windows 2000 machine. I ...more >>

Login Prompt for remote connection
Posted by Kenneth Koh at 10/23/2005 12:00:00 AM
Hi all We have a terrible situation now. We have 3 new web servers (IIS6.0) in the same domain, each hosting a different web site, e.g. http://companyintranet, http://hrapp and http://payrollweb . In the LAN environment, the users have not problem logging into the different sites silently...more >>

Pfx import for SSL problem
Posted by pj_servadmin at 10/21/2005 9:51:06 AM
We have 2 NLB 2003 SP1 webservers, and we have a site that SSL works fine on one of the NLB servers (the one the CSR originated from), but does not work on the other. In order to get a certificate for a site, we make the CSR on one of the servers. When we get back the cert it is installed t...more >>

500 Invalid PORT command
Posted by jan at 10/21/2005 2:41:04 AM
Hi, I create two FTP sites on the IIS 5.0. And first FTP site port 21, and second FTP site port 4999. And also i create 3 virtual directory in the second FTP site. We use ADSL internet connection. I open these ports from ADSL modem to reach these FTP sites from WAN. First FTP site which use...more >>

IIS Log Files logs 401 HTTP Codes
Posted by Jagjeet Chahal at 10/21/2005 12:00:00 AM
Hello All, I have a small ASP.Net Web application with a single aspx page. Following code is written in page load of the Webform1.aspx private void Page_Load(object sender, System.EventArgs e) { // Put user code to initialize the page here Response.Write("Logged user is " + User.I...more >>

Implementing Singleton in ASP.Net
Posted by RaVs at 10/20/2005 5:19:01 PM
I was not sure where to post this question. This discussion group seemed most appropriate. If any one things otherwise can they please redirect me to the right discussion group? Here qoes the question anyway... I have built an ASP.net application that uses the singleton pattern to keep o...more >>

http logs in shared hosting environment
Posted by fred at 10/20/2005 4:46:05 PM
I'm a UNIX guy, and had a windows 2003 web edition server dropped in my lap. It's going surprisingly well, with the exception of a log issue. The machine is a shared hosting environment, under IIS6, and I can't seem to find a way to allow customers to view their http logs. I am logging in th...more >>

intermittent failures for web service
Posted by IIS Administrator at 10/20/2005 3:26:12 PM
I am running windows 2003 enterprise edition sp1 with IIS 6.0 and Oracle client 9.2.0.1.0 When I run an application that connects to a web service located on this machine I receive intermittent failures. CPU usage will spike to 100% and the web service will not return control to the client...more >>

How do I change the default web page?
Posted by LinuxMan at 10/20/2005 10:11:04 AM
My Background: Linux / Netware / Unix O/S: Microsoft Small Business Server 2003 SP1 Configuration: * Single NIC * 3rd party firewall in front of it with port forwarding. Classic DMZ setup. * firewall is forwarding ports 25/80/443/444 to server * ran "connect to internet" wizard and set it ...more >>

Looking for an article on identities used in IIS 6.0 web applicati
Posted by Chris Cichocki at 10/20/2005 8:09:05 AM
I'm looking for an article that would explain the request processing that goes on in IIS 6.0. For example, when a request is received, it starts a new process by running w3wp.exe and it is started with the identity specified in the Application Pool settings. But then if you request a file, t...more >>

need default iuser password for iis 6.0
Posted by radial NO[at]SPAM gmail.com at 10/20/2005 6:36:01 AM
I had to change the anon account a web site used, now i want to change it back to iuser_machinename but i dont know the password. The searches i've done showed i can tell the password using the metabase, and i got the metabase explorer but cant find users in there. i have found wehre you ca...more >>

virtual server authorization
Posted by Aric at 10/19/2005 9:00:49 PM
I am currently about to launch an ecommerce solution for my company an was wonder about securing the administration section. Currently th plans are to have the administration site in a virtual server usin windows authentication and restricted to local ips only. While lookin at all the documen...more >>

Change IUSR password...
Posted by Dave DeCoursey at 10/19/2005 8:43:19 AM
Hi, I had to change the password to the IUSR account and I thought I got everything updated, but I'm still getting logon errors in my security log. The web sites seem to function OK, but these errors bother me. Any idea where I can look to see what is really creating the error and where...more >>

Get ROOTDSE via ASP receive error: 8007054b
Posted by Daniel Di Vita at 10/19/2005 7:48:12 AM
We are developing web pages in ASP classic on an IIS5 server. We are having an issue on our Production server that we are not seeing on our Development server. Here is the code first of all: <%@LANGUAGE="VBSCRIPT" CODEPAGE="1252"%> <% 'we created a DLL that will allow us to impersonate an a...more >>

IIS 6.0, Host Headers and SSL
Posted by Tymbow at 10/19/2005 2:18:02 AM
I have a client that for various reasons can only have one IP address, however they need to seperate SSL enabled web sites. I followed the Technet Article at http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/596b9108-b1a7-494d-885d-f8941b07554c.mspx. The wilcard cer...more >>

Building a Windows 2003 DMZ Server without ISA
Posted by johnpaul.temple NO[at]SPAM gmail.com at 10/19/2005 2:02:51 AM
hi I am planning on building a Windows 2003 Web Server and placing into a DMZ, with CISCO PIX on each side. I have found only a few documents that describe how to configure the Windows Server without using ISA. Has anyone got any tips or suggestions for this sort of scenario? We don't h...more >>

asp.net and IIS 6, access denied to the web directory.
Posted by Slim at 10/18/2005 2:35:02 PM
Ok. Lets say I am running website called dev.mysoftware.com. In IIS, I have home directory set to C:\Inetpub\wwwroot\dev.mysoftware.com When I open the site, I get the error: ================================================== Server Error in '/' Application -----------------------------------...more >>

Can no longer access IIS 5.1
Posted by No_Spam at 10/18/2005 12:32:23 PM
After I installed the latest Microsoft security patches on my Windows XP Pro (dated 10/11/05), I'm no longer able to access IIS console. When I open IIS console, my server is no longer exists, and when I try to connect to it it says I don't have permissions to it, although I'm logged in as admin...more >>

Securing IIS IUSER
Posted by Pritchie at 10/18/2005 9:31:29 AM
> "Pritchie" <info2005@remove-this-including-dot.bigbunker.com> wrote in > message news:dpO4f.3413$sm1.224@newsfe5-win.ntli.net... > > Hi, > > I want to restrict IUSER access to the server file system. I removed it > > from the "Users" group and added it to the "Guest" group. Thinking that > ...more >>

DCOMCnfg permissions for application
Posted by Allison Sutherland at 10/17/2005 1:01:02 PM
Windows 2003 Server, SP1, IIS6 Primary Web Server. Special Dashboard Intranet application requires: 1. OfficeAutomationuser to be created. 2. Dcomcnfg - requires user to be added to Word Document application to Default Access Permissions and Default Launch permissions. DComcnfg - to Conf...more >>

Windows Authentication - Urgent
Posted by newbie sql at 10/17/2005 10:03:18 AM
I have an application running on IIS on box A. Within IIS I am using a folder which is a shared folder on other machine B. Again the authentication is Windows only for this and all the authentication is thru Domain users. My problem is if I try to access files on Machine B thru Internet Explo...more >>

Configuration Error with IIS 6.0
Posted by vmas at 10/17/2005 8:55:12 AM
Hi, I am trying to deploy set of Web Services on IIS 6.0 / Windows Server 2003. I have two websites running on IIS. one listening at default 80 & the other at port #: 8181. When i try to access some of the web services from Web Site listen at 8181 i get the following error. I am tryin...more >>

IIS and Disaster recovery
Posted by Doug at 10/17/2005 12:00:00 AM
Hello. I work for a university and we're looking at disaster recovery for our WWW server in the event of a catastrophic event. The main thing is having the ability to give instructions to parents; phone number, email addresses, other info. The one option that has come up is having a remote ...more >>

W2k3 - Service Pack 1 Install - now outside world can't see webpag
Posted by ebtsup at 10/16/2005 1:16:04 PM
Installed service pack 1. * Internal users can see web site. * External users on same T1 can see website. * All other external users.. can not. > Websites do work. > The I/P resolve... but the page never renders. > If you go in from external processing.. everything works just. > EVERTYHING wa...more >>

limiting access to files with asp.net
Posted by Daniel at 10/14/2005 4:58:55 PM
limiting access to files with asp.net is there any way i can make a file only accessible to certain users of my website? my files are to large to copy to a temp directory and they are of many types, .exe .xsl .xml etc. i want an href to each file but only allow users who have the right login-i...more >>

CGI Apps can't perform system commands (IIS 6.0 / Windows Server 2
Posted by Nate at 10/14/2005 8:33:04 AM
None of the CGI apps (Perl and ASP) on my site can perform system commands (dir, del, copy, etc.) for most users. I am running IIS 6.0 on Windows Server 2003. I have an app pool set up for the virtual directories that need this functionality. The identity for that pool is local system. Eac...more >>

SSL and Client Authentication
Posted by arijan at 10/14/2005 12:46:04 AM
I have two machines with 2k3, I one I setup Stand-alone CA and in the other one WEB page, I am requesting web cert. from CA , and then I am installing it, and then from another Comp. running XP I am trying to request Client cert. where I install this cert, and I go and map this cert on IIS to lo...more >>

Install/Use UrlScan on 6.0?
Posted by Eric George at 10/13/2005 11:28:13 PM
Hi there, A question that probably has been here a thousand times. I'm running IIS 6.0 and will be using it for development of dynamic content on Professional 64-bit. I read: http://www.microsoft.com/technet/security/tools/urlscan.mspx but am still not sure if I should use it. Basically can a...more >>

IUSER on Cluster
Posted by LionPaw at 10/13/2005 9:19:09 PM
Running an active/passive cluster with a shared drive cluster resource S that holds the web sites pages. When Server 1 is serving pages IUSer_Server1 runs the site When The cluster rolls and Server 2 is serving the pages IUSER_Server2 is used. THe trouble is that the ACLS on the Shared S D...more >>

Changing from self-signed certificate to a trusted CA
Posted by Michael Cattaneo at 10/13/2005 9:16:22 PM
I currently use a self-signed cert on my 2003 server w/ exchange for OWA and RPC over HTTP. Works great! ... now my client has wireless phones that cannot use the self-signed cert. Is there a way to request a cert from a "real" CA without having to remove the current one (which will bre...more >>

IIS 6 URL Authorization Erroe 518
Posted by Hink at 10/13/2005 9:13:58 PM
Every now and then I receive a 518 (URL authorization store cannot be opened) error. All ACL's are correct on the AzPolicy.xml file. Based on a MS TechCenter article, I ran the File Monitor utility and it reports a "Sharing Violation" on the AxPolicy.xml file each time I receive this error. ...more >>

CDO Permissions
Posted by Mendoza at 10/13/2005 9:47:45 AM
I have a script written in ASP/VBScript running on Windows 2003/IIS6. The Script uses CDO to send an email message. When I use the Default Application pool, using "Network Service" as the Identity, CDO works great. However, when I change the application pool to one that uses a configurable i...more >>

Script only runs from Default webistec
Posted by Jody at 10/12/2005 11:27:02 AM
RE: Windows 2003 Server SP1 / IIS 6.0 I can successfully run two a perl script files from my default website but I can not run the same files from another website. I have verified that the permissions for the wwwroot and cgi-bin sub folders in both the ‘Default’ and ‘mywebsite’ are...more >>


DevelopmentNow Blog