Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008


all groups > iis security > november 2005

Filter by week: 1 2 3 4 5

HTTP status 401: Unauthorized
Posted by myao2005 NO[at]SPAM gmail.com at 11/30/2005 11:11:47 PM
Not sure this is the right group to post my question. We are using windows 2003+ asp.net. We have a virtual directory with the "Anonymous Access" disabled. We are using "Integrated Windows Authentication" and "Baisc authentication" for this virtual directory. This virtual directory is automati...more >>

Can't see the security sheet of directory on "proprities"
Posted by Naby at 11/30/2005 3:09:02 PM
Hi everybody My entire system was formatted using NTFS, how is it possible that I cannot see the security tab on the files "properties" sheet? I want to change accees rights Thank you for your help....more >>

how to Grant "write" permission to a user
Posted by Naby at 11/30/2005 12:22:07 PM
Hello everybody how do I grant a user, actually an asp.net web page, writing priviledges on a folder? Thank you....more >>

FTP Server Logging
Posted by MikeV06 at 11/30/2005 11:57:01 AM
I monitor my router and ftp logs on Server 2003. As would be expected, port 21 packets show up in both. However, I have an instance where the router shows an incoming and outgoing packet for port 21. However, no entry was made in the ftp log. The router shows Nov 29, 2005 12:25:37.302 UTC ...more >>

File not found message when file is acutally there
Posted by Keith at 11/30/2005 8:38:20 AM
We have Siteminder loaded on a Windows 2003 server with IIS6. Part of this software installs files with a .unauth extenstion. When you browse to these files you ger a 404 File Not Found message even though the file is there. Any ideas? Thanks, Keith...more >>

IIS6 - Virtual Directory to UNC Share error 1326
Posted by DaveS at 11/30/2005 2:11:03 AM
Trying to map an IIS virtual directory to an area on a separate file server. The machine running IIS is running stand-alone (no domain). The file server is in a domain. The virtual directory is mapped using the Connect As structure using a domain account and password known to the file ser...more >>

IIS 6.0 authentication ISSUE from a FQDN vs http://name
Posted by Mike S at 11/29/2005 5:32:02 PM
iis 6 authentication ISSUE------------- Issue- we have a virutal webiste (named WEBSITE) that we only want users of a certain group to be able to access. The AD domain name is ABC.com. The dns name for the website is WEBSITE.XYZ.COM. The host headers are setup as follows- WEBSITE and WE...more >>

SSL
Posted by jaggei at 11/29/2005 5:34:32 AM
I have four web applications under default website in IIS. I want to enforce SSL only on some pages in all these applications ,where i gather user information. How to go about it. this application is available to users on internet. Thanks in Advance ...more >>



Basic IIS authentication only works with administrator account
Posted by Joemtz at 11/28/2005 1:49:06 PM
Hey everyone, I'm familiar working with Windows 2k Servers. I restrict access to virtual directories or websites either by uncheking the "allow anonymous" or adjusting ACL's on the folder where the website is. Then asign a standard user account to those ACL's. Problem is that since I up...more >>

LSASS due to Web request
Posted by Serge Pashkov at 11/28/2005 8:12:21 AM
My question is similar to one issued in this group in the beginning of September "Lsass error - Possible IIS breaking through web request" We suffer from regular crash of Windows 2000 Server due to following error: "The security package Negotiate generated an exception. The package is now d...more >>

How to deploy a CGI web service
Posted by Barak at 11/27/2005 12:00:00 AM
I have an IIS6, and a CGI (.exe) web service I want to deploy. I put the .exe in a virtual directory of it's own. I understand I need to give execution rights in this directory, I want to know if there is a way that I can prevent someone from putting another .exe file in the same place and r...more >>

Integrated Windows Authentication authenticating the wrong user
Posted by teedilo NO[at]SPAM gmail.com at 11/23/2005 10:57:56 PM
I support an application that supports Integrated Windows Authentication. I am running into a strange problem with my own user account. It appears that Internet Explorer is passing the wrong credentials to the web server, because the application is trying to authenticate me with the wrong user...more >>

Directories and subdirectories permissions
Posted by Alan Wen at 11/23/2005 12:04:06 PM
IIS6 - Windows 2003 Ent. I have an FTP site with numerous hundreds of directories/contents. I do not want the user to be able to traverse up a folder and see all this content - I just want them to see the content of the link I send them - they would not know the other folders that are in the...more >>

Website Problems
Posted by George Schneider at 11/23/2005 9:01:11 AM
We have a Webserver called webserver1 that we can get to from our main ste without a problem. The problem is when we're at another location and we cannot get to this server. I can't browse to it or ping it from another location. The server is listed corectly in DNS. What would cause us to...more >>

website authentication question
Posted by orangenick2002 NO[at]SPAM yahoo.co.uk at 11/23/2005 5:58:20 AM
Hi, I work for a consultancy that is offers free hosting to an NPO. they have requested that a part of the website be available only to certain users (around 2000). I'm not sure how to do this as I've never made a website with authentication other than internal websites with authentication base...more >>

Cannot find server or DNS Error - ISS 6.
Posted by Sezgin at 11/23/2005 4:04:02 AM
Hi, 2 node Windows 2003 NLB Cluster,IIS 6.0 Running in IIS 5.0 Isolation mode. An identical web site on both nodes.Web site does not allow Anonymous access.Used to run fine until recently. Now we get the "Cannot find server or DNS Error" error message. When I configure the web sites to Allow...more >>

Anonymous NNTP access
Posted by Guus Ellenkamp at 11/23/2005 12:00:00 AM
I am trying to set up Anonymous access for an nntp virtual server. I created an account for that IUSR_NEWS and added the credentials in the appropriate field. When using another user it works fine (Integrated authentication), but when I choose Anonymous and add the new account, it doesn't w...more >>

SPN for website (with AppPool) running under a Host Header
Posted by Iain Sandercock at 11/22/2005 9:42:01 PM
Hi All, I've dealt alot with kerberos in the past, and have a good understanding. My dilemma is that I'm trying to get a more complex scenario running, and am after a definitive example from someone who has got this working, just to confirm that I'm heading down the right path.... I hav...more >>

IIS SSL Encryption handshake information
Posted by John McClain at 11/22/2005 1:41:09 PM
We have a servlet that is served by Tomcat. IIS is employed to redirect ot Tomcat via AJP. IIS is also SSL enabled as our data is sensistive. I am setting IIS to use SSL encryption on the default website. I have a redirector that forwards request to Tomcat I wish to call a jsp in Tomcat an...more >>

Integrated Windows Authentication fails
Posted by Wouter Demuynck at 11/22/2005 6:40:51 AM
Hi, I'm encountering a problem which is quite 'mysterious' to me. Scenario: - Windows XP Pro SP2 with IIS 5.1, acting as both server and client - a virtual directory /tests/secured/ with Directory Security set to "Integrated Windows Authentication" (IWA) (no other options are enabled) I...more >>

SSL info
Posted by rahul_2065 NO[at]SPAM yahoo.co.uk at 11/22/2005 3:09:48 AM
Is it possible to buy SSL certicates cheaper from somewhere? I want to use it for multiple sites and don't want the hassle of going through whole of the procedure all over again.Thanks. ...more >>

SSL/Non-SSL on 1 Server
Posted by nabimomo at 11/21/2005 10:44:06 PM
I currently have 2 web sites on 2 different servers: 1 ssl and 1 non-ssl sites. I am planning to move the ssl site to the non-ssl server which is a Windows 2003, IIS6 box. I figure I would setup the 2 sites using 2 different virtual directories. 1) Do I export and then import the certifica...more >>

Public IP as Relay?
Posted by Eduardo T at 11/21/2005 11:26:58 AM
Is it safe to use the public IP of a server as a relay in IIS? I'm testing the SMTP server in IIS. A web app on this server needs to be able to send email. The only way I've got it to work so far is by going into Default SMTP Virtual Server Properties > Relay Restrictions > selecting "Only th...more >>

About SSL
Posted by rahul_2065 NO[at]SPAM yahoo.co.uk at 11/21/2005 6:07:34 AM
I am working on a shopping cart website and for that I need SSL. The problem is that I don't know how to install SSL. Is it possible to download it from a website or do I need to buy it.If I have to buy it then from where can I buy it from and how much it costs? Any information about SSL will ...more >>

Server.CreateObject("Scripting.FileSystemObject")
Posted by MoF at 11/20/2005 12:00:00 AM
Hello! I have for a long time used the line: Set FS=Server.CreateObject("Scripting.FileSystemObject") in my ASP code. Suddenly one day this week it stopped working and I now get the error: Server object error 'ASP 0177 : 800401f3' Server.CreateObject Failed If I add the IUsr_<Compute...more >>

Page Cannot Be Displayed with SSL (not 443port)
Posted by sebnunes NO[at]SPAM hotmail.com at 11/17/2005 8:27:08 AM
Hi all, I have a strange problem here. I have only two IP's and I need SSL on different web sites so I have configured one web site to use the port 444 for SSL. It's seems to work fine, when I'm on my desktop I connect to the web site using https it works fine, but on another computer when ...more >>

Cannot view my website
Posted by Pete at 11/17/2005 6:18:03 AM
I have changed IIS to point to my default location (C:\inetpub\wwwroot\oursite\), changed the default document to default.aspx (my default doc), allowed HTTP traffic in the XP Firewall settings, allowed anonymous access in IIS. Why can't I get to my site via the IP address (http://209.183.x...more >>

cname does not match
Posted by Guus Ellenkamp at 11/17/2005 12:00:00 AM
I am trying to set up a secure connection for my SMTP server. However, when I try to send messages, I get the following error message: The certificate's CN name does not match the passed value. How do I create the correct certificate? server name: main.megaheights.net I am using an e-m...more >>

Read Only Access
Posted by Mark St Laurent at 11/16/2005 8:29:59 PM
I have created a vitual directory "Financials" on internal web server which is using IWA to access excel spreadsheets. When a user with NTFS full permissions accesses directory all files open. When a user with Read & Execute, List Folder Contents and Read access opens the web folder the fold...more >>

SSL Host Headers IIS 6.0
Posted by Jeniffer K at 11/16/2005 2:01:12 PM
Today is the first time I've tried configuring a few sites with a cert and discovered that its not all that simple, I was under the assumption that its much like standard http on port 80 where it allows you to share the same IP by specifying a host headers with https on port 443 however it is ...more >>

Stop logging of localhost
Posted by Jeff at 11/16/2005 11:10:30 AM
Can someone tell me how to stop logging localhost or particular IP addresses in IIS 5.1? Also, anyway way to block IP addresses with IIS 5.1 short of the Windows Firewall or a hardware firewall? Thx! ...more >>

xmlrpc question
Posted by FD at 11/16/2005 9:05:33 AM
Hi, I read the post and response about xmlrpc hanging. I do not have that problem but I have seen this message in my IIS 6.0 logs. Since the IP addresses are getting a 404 error, I think I am ok. Since I am new to IIS, I just want to make sure a virus has not infected our webserver. Thanks...more >>

digest authentication box greyed out
Posted by John at 11/16/2005 8:30:10 AM
Hi, I am running Windows 2000 server with IIS 5.0 SP4, which is hosting a website which requires digest authentication. Recently the website has stopped working. I have noticed that the "Digest Authentication" box is now greyed out. I am able to browse active directory from the server and hav...more >>

secure and non-secure access to one site
Posted by bill tie at 11/16/2005 12:47:03 AM
The machine is Win2k3 SP1 with IIS 6.0. Suppose I have a website siteName.companyName.com. Internal clients should be able to access the website as follows: http:/siteName/ External clients should access the website using SSL as follows: https:/siteName.companyName.com I believe I ne...more >>

metabase explorer and ssl diagnostics tools
Posted by bill tie at 11/15/2005 3:21:02 PM
Can anybody point me to Metabase Explorer and SSL Diagnostics versions that recognize SSL host headers in IIS 6.0? Thank you. ...more >>

Accessing remote files through IIS and web applications
Posted by itmanager at 11/15/2005 1:11:06 PM
We have an ASP.NET application that attempts to access an Excel file located on a remote file server. This always results in a logon error, but if we move the Excel file locally to the IIS server, we are able to access it without a problem. We are running on an IIS 6/Windows 2003 server and...more >>

IIS CRL publishing
Posted by Magnus MÃ¥rtensson at 11/15/2005 7:08:10 AM
Hi! Here's a good one for all ya'll IIS experts out there! How is the CRL distributed from the CA to the PKI-clients in IIS? Push? Pull? Combination? Is this possible to configure in your PKI solution? /Magnus - NoopMan ;~) ...more >>

What do these Account Names mean?
Posted by SMAccount NO[at]SPAM gmail.com at 11/14/2005 3:28:40 PM
There are a number of users listed in the Permissions List for a Folder on my Web Host (names changed slightly to protect the innocent). Can anyone tell me where these are defined? For instance, what is OWS? Administrator -- RWXDPO SYSTEM -- RWXDPO NETWORK -- RX NETWORK SERVICE -- RX IU...more >>

why do .asp files prompt for login but .htm files do not?
Posted by mushu at 11/14/2005 1:48:09 PM
IIS 5.0 in a domain. IIS has Basic & Integrated selected, NOT anonymous. All users have I.E. browser. All users are members of the same domain. IIS Basic Auth MMC section has the correct domain entered. There is no global.asa file in the directory. All links in the .asp page have been validated ...more >>

Wildcard SSL possible at domain level?
Posted by duncan.mason NO[at]SPAM gmail.com at 11/14/2005 7:37:13 AM
Hi All, I am trying to serve content over SSL for multiple sites on a single server machine. I have read a lot about using wildcard certificates for IIS to cover several subdomains like.... sub1.domain.com sub2.domain.com etc my problem is that the 2 websites are not on the same domain n...more >>

xmlrpc.php causing system hang?
Posted by Mark Lordi at 11/14/2005 7:15:37 AM
Hello everyone! first time posting here. I have a windows 2000 server running iis 5. I am having this weird problem of late (started around 11/7/2005). I noticed in my event viewer under system that I have been getting these timeout messages from a file called xmlrpc.php. Now the weird thing is ...more >>

Authenticate against AD
Posted by Bud Belles at 11/13/2005 7:30:59 AM
I'm running Windows Server 2003. My web pages are build using ASP (not ..NET). Some of my pages show a list of Word documents that a viewer can download. Each page shows those documents that the "owner" of the page wants to be available for downloading. Currently, I get the files emailed to m...more >>

IUSR & IWAM account
Posted by newbie at 11/12/2005 8:42:01 PM
Hi, I updated the metabase for the userid and password of both the above account and the web site is running fine. But now I cant seems to find any logon/logoff events of these accounts in the security log although I have set the authenication methods for IIS5.0 to anonymous access. Am ...more >>

Multiple SSL certs on a single server IIS 6.0
Posted by Fred at 11/12/2005 1:01:03 AM
Hi We have a server hosting a number of websites accessed via SSL using name1.domain.com and this has been working fine. We now want to create a second series of websites but with different branding but hosted on the same server. The IP is the same but the URL is name2.domain.com. We h...more >>

repost: multiple SSL certs and NLB
Posted by z at 11/11/2005 2:54:22 PM
i'm sorry for the repost, but i thought i should repost this under a correct, supported account this time... --- I've so far failed to find the correct google search or MS site search phrase to coax the answer to this one to the top of a results page so i wonder if i can ask for a bit of gui...more >>

SSL on IIS6 Performance Problems
Posted by John at 11/10/2005 4:58:01 PM
I have Windows 2003 Server Standard Edition (fully updated) with IIS 6.0 installed on an IBM eSeries single Xeon 2.8Ghz System with 1GB RAM and a gigabit NIC. All the hard drives are 15K RPM Ultra 320s. We are moving our website from an old (NT 4.0 w IIS x) to this new system. When SSL is ...more >>

SSL Login web page
Posted by Big Cone at 11/10/2005 2:37:50 PM
Hiya I'm having troup logging into the SSL site from the no-SSL site. The active server pages work right, but the form does not want to post if the action is the secure site. It will post if the action is the non-scure site. What the heck? ...more >>

How to enable SSL on IIS 6.0
Posted by Che at 11/10/2005 1:20:12 PM
I am trying to setup a Windows 2003 workgroup server for Citrix Presentation Server v4.0. I have installed "Certificate Service" and I am wondering how I can request a server certificate and use the same server to authorized the certificate? Thanks Che...more >>

deny a user the ability to create a virtual directory, but still view the IIS MMC?
Posted by jeffdrobinson NO[at]SPAM gmail.com at 11/10/2005 9:17:47 AM
is there a way to deny certain users the ability to use the Virtual Directory Creation Wizard? ...more >>

IIS 6 Metabase Auditing performance ?
Posted by Rene at 11/10/2005 6:06:05 AM
Hi out there! Are there any known problems with performance when you activate the IIS 6 Metabase Auditing ? Thanks for infos Regards. R....more >>


DevelopmentNow Blog