Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > iis security > october 2005 > threads for october 22 - 28, 2005

Filter by week: 1 2 3 4 5

Problem with 2 way ssl
Posted by Curtis Ransom at 10/27/2005 12:47:10 PM
I am trying to set up 2 way ssl with iis 6. I install the server cert, turn on ssl and click "require a client certificate." Well, when I hit a web site on the server from a browser, the server pushes it's cert to the client, but does not ask the client to send one. The "Choose a digital ce...more >>


windows authentication
Posted by Colin Bondi at 10/27/2005 10:47:21 AM
I have a question about IIS securty. If you disable anonymous access and choose only integrated windows authentication, should you be prompted for a username and password when accessing that site from a domain computer running IIS? Or should IIS pass the credentials of the currently logged on ...more >>

Newbie to IIS - Need some help please
Posted by buddd at 10/27/2005 4:29:12 AM
Hello, I am quite new to IIS and I could use some assistance. I am running IIS on Windows 2003 Server (Enterprise). Here is what I would like to accomplish: 1. A single public IP address and point to different web servers. 2. Encryption / security (I know point one does not support SSL) ...more >>

Smartcard-Webauthentication: Changes in IIS 6.0?
Posted by e9025902 NO[at]SPAM stud2.tuwien.ac.at at 10/27/2005 12:38:51 AM
Hi there! I am testing Smartcard-Authentication with our Webapplication on IIS 5.0 and IIS 6.0 and found the following different behaviour: with IIS 5.0 the Smartcard PIN is asked several times on each Page, while with IIS 6.0 the PIN is asked only once. IIS 6.0 seems to cache the PIN or ra...more >>

IIS Kerberos/SPN Help
Posted by Craig Taylor at 10/27/2005 12:00:00 AM
We have an IIS Webserver running on Windows 2000 as part of our domain. Its netbios/dns name is webserver nad I can connect through a browser to this address and authenticate using Kerberos OK. However I have set up an dns alias intranet.theforwardgroup.com to point to this server but it fails t...more >>

IIS using Kerberos: Excessive nettwork traffic
Posted by ameneon at 10/26/2005 12:33:47 AM
Hi, We are currently switching from NTLM to kerberos on a large portal installation which uses the IIS for SSO purposes. This is a clustered solution so we've set a domain users as the owner of the IIS app pool and configured the SPN so it can issue tickets on the cluster address. We've verif...more >>

Certsrv Page not authenticating with IE
Posted by BCW at 10/25/2005 7:18:52 PM
I have an XP Pro client with a user logging on who is in the Domain Admins group. There is only one DC, server01 in tailspintoys.com. The DC is also a certificate server and Exchange server for coursework. When I try to get a certificate at http://server01/certsrv my authentication fails using...more >>

Code runs until Basic Authentication or Digest Authentication is r
Posted by BMeyer at 10/25/2005 12:22:01 PM
We have Windows 2003 server running IIS 6.0. Have an application that creates ASPX session variables based on values found in ASP session cookie. Works great if anyonymous is allowed. Once Basic or Digest Auth is required, we get 401 errors. We've even included a default user account ...more >>



Changing PAssword
Posted by Randaddyz at 10/25/2005 12:16:04 PM
Hello, I need to change the admin password on our IIS server. When I change the password my website goes down. When I put it back to its orginal password everything comes back online. Any ideas why this happens??? -- Ever Learning Net Admin...more >>

IIS 6.0 best practices
Posted by Ren at 10/25/2005 11:40:02 AM
Does anyone have suggestions on best practices for security, and optimization for IIS 6.0...more >>

Authentication Problems
Posted by Barry at 10/25/2005 11:25:06 AM
Have recently migrated my server from W2K to a W2K3 platform, and everything is functional on my site but I have one minor issue that I would like some help with. I'm running a W2K AD domain with my W2K3 server as a member server. Client computers are either WinXP or W2K Systems, fully pat...more >>

My web forms will not allow users to submit.
Posted by Loyal at 10/25/2005 8:02:02 AM
I upgraded from server 2000 to standard 2003. I can get all of my Intranet to work with exception to web forms. The users are asked to submit a user name and password to complete. In the past they have never been asked to do this. Also the only user name and password the site will take is ...more >>

IIS 6.0, Old Credentials
Posted by John Osborn at 10/24/2005 10:56:00 PM
Hello, After changing usernames on our Active Directoy network, old credentials are still being passed to our asp.net pages. A server reboot fixes the issue but, as you can imagine, this is unacceptable. Any help would be great. Thanks...more >>

IIS ignoring NTFS Deny Permissions
Posted by Ishmealm at 10/24/2005 3:28:04 PM
Hi, I'm running IIS 5.0. I have a virtual directory that resides on another server. The folder that the virtual directory connects to has Share permissions of Everyone "Change" and NTFS perms of 4 groups: Admins- Full Control Group1- Modify Group2- Deny (Full Control) ConnectAsSVCAC...more >>

Integerated Authentication Not Work?
Posted by Richard Morey at 10/24/2005 12:41:51 PM
Hi -- We have two servers in our office running Active Directory. One is a Windows / Exchange 2003 server and the other is a Windows 2000 box. My client PCs are all running XP Pro, SP2 and log in to the domain controller. I have set up our corporate intranet on the Windows 2000 machine. I ...more >>

Login Prompt for remote connection
Posted by Kenneth Koh at 10/23/2005 12:00:00 AM
Hi all We have a terrible situation now. We have 3 new web servers (IIS6.0) in the same domain, each hosting a different web site, e.g. http://companyintranet, http://hrapp and http://payrollweb . In the LAN environment, the users have not problem logging into the different sites silently...more >>


DevelopmentNow Blog