Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
all groups > iis security > november 2005 > threads for november 1 - 7, 2005

Filter by week: 1 2 3 4 5

How can I use both http and https for the same website?
Posted by blasapher NO[at]SPAM cox.net at 11/7/2005 10:23:37 PM
First of all, I'm new here; and just now learning IIS - so thanks for being patient with me! I have a website, www.mywebsite.com, that has default page of default.aspx. I have applied the SSL to the entire site. Now, my customer would like to be able to do this: They would like to go t...more >>


IIS ASP Parent Paths
Posted by Joe at 11/7/2005 1:51:01 PM
Hello, I have a website programed in asp and it needs parent paths to operate correctly. I have heard of parent paths being very risky. What are the issues with this type of setup? Thank you Joe...more >>

We can't find "192.168.1.11"
Posted by OutInTheDesert at 11/7/2005 12:58:03 PM
I am unable to open an IIS page using the IP address. Instead I receive the MSN search page with the message "We can't find "192.168.1.11". Web pages will open if I use "Localhost" or 127.0.0.1 This is a new installation with all default settings. Running IIS on WinXP Pro SP2 with workgr...more >>

Can you force the ftp site to accept 7-bit only?
Posted by Carol at 11/7/2005 1:58:52 AM
I may have to set up an ftp site for anonymous upload. The files to be uploaded will be text only. I have been looking for a way to force the site to allow 7-bit connections only - is this possible? Or is there some other way I could enforce text only? Thanks, Carol ...more >>

windows 2000 IIS 5 403.6 ip address restriction
Posted by Bulent at 11/7/2005 12:00:00 AM
I have a problem with IIS 5.0, My IP address is blocked by IIS server automatically, when I browse the web page. I have to go to IIS admin, remove my ip address from the deny list. DOes anybody know why IIS blocks my IP address? Thanx. B&B. ...more >>

Server 2k3 SP1 Won't do a intergrated authentication
Posted by Lokiarmos at 11/6/2005 11:34:00 PM
I have a server 2k3 with SP1 and latest patches connected to my domain. The problem that i am having is that one of my website will not authenticate my user. I have set the authenication level to Intergrated Windows authentication but it won't accept my user name or password. i was looki...more >>

Windows update failing
Posted by Yazzie at 11/5/2005 4:37:03 PM
Why is my windows update request failing?...more >>

Desperate - Bypass Basic Authentication Prompt?
Posted by Kenneth Koh at 11/4/2005 9:44:06 PM
Hi all Is it achievable to use an application login to bypass the Basic authentication prompt? Via ISAPI? Thanks in advance! Regards, Kenneth ...more >>



open contents of web folders in edit mode
Posted by Mark St Laurent at 11/4/2005 8:06:51 PM
I am running IIS 5.1 on a XP sp2 PC. I have created an internal web site for my staff. This site contains pages that are published from excel speadsheets when edited by a designated employee. Originally the spreadsheets were access via a shared directory, opened then edited and saved which pub...more >>

Configure IIS Server security
Posted by EddieF at 11/4/2005 12:41:03 PM
Hello, I am new at setting up IIS Web Servers . I need to make sure that a new Web Server running on Windows 2003 SP1 server with IIS 6 is set up securely. Here are the steps I've already taken: 1) Created two NTFS partitions - one for the system and another for data 2) Installed URLSca...more >>

Adding allowed IP addresses in bulk
Posted by Rob at 11/4/2005 7:20:10 AM
Hi Ive got a website which is restricted using the IP address and domain name restrictions option. Ive been asked to add 60 seperate ip addresses to the list, all of them different. Is there a way to add them in in bulk? Rob...more >>

Trust my own CA ;ssl certificate is not from a trusted publisher
Posted by Dennis at 11/3/2005 4:27:02 AM
My goal is to get outlook web acces working, wihout SSL errors. It know says my ssl certificate is not from a trusted publisher. When I choose install certificate , the message appears again the next time. How can I get my server on the trusted publishers list of my windows XP workstation. wha...more >>

SSL question
Posted by DB at 11/2/2005 1:02:04 PM
How do I do this? I have many mail servers that use SSL. web server names and the SSL names are as follows:-- webmail1.domain.com webmail2.domain.com webmail3.domain.com webmail4.domain.com webmail5.domain.com I want users to simply use httpS://webmail.hbk.com which will redirect to ...more >>

SSL security question
Posted by Francisco Lopez at 11/2/2005 11:28:46 AM
We recently upgraded our server to Win 2003 - from nt4. We created a SSL Certificate backup key according to this instructions: HOW TO: Import and Export an IIS 4.0 Certificate by Using Key Manager http://support.microsoft.com/default.aspx?scid=kb;en-us;324904#2 My question is: can I impor...more >>

killing client popup window
Posted by s.chelliah NO[at]SPAM gmail.com at 11/2/2005 8:39:27 AM
I am using basic authentication using an embedded web server (not IIS) and noticed a problem (bug?) with microsoft IE 6.0. Here are the steps I did: 1) when the authentication window pops up, log in using user name and password. 2) Let the session expire (Using my code in the web server...more >>

Anyone know much about SSL?
Posted by alexbax at 11/2/2005 7:03:08 AM
I currently host a webserver runing IIS5.5 with an SSL 56bit cert installed. I am thinking about upgrading to an SGC cert from thwate. As this can support up to 256bits, I am wondering if there will be any speed issues when accessing the site? Cheers! Alex...more >>

Security problem in IE login prompt...
Posted by Wan at 11/2/2005 5:29:14 AM
Hi, Please enlighten why IIS Server ( running on a domain in Win2003 ) allow the IE 6.0 client to login with just username and password only, without keyin the domain name before the username in the login prompt ? Is it a security problem in IIS Server in Windows authentication mode ? ANy...more >>

Application-defined or object-defined error
Posted by Sarge at 11/2/2005 5:20:07 AM
We have an internal corporate VB6 web application that uses MSGraph to generate graphs. It works fine under W2k server, but not on W2003/SP1 - I get the error in the subject line. (Only authenticated users may access the site.) The application is running in its own application pool using th...more >>

Generate SSL for Intranet
Posted by vidro at 11/1/2005 11:30:08 AM
What I need: I need to generate a couple SSL certificates just for my Intranet, I do not need any out side CA's What is, and How is, the best way for me to do this?...more >>

FTP Login flood
Posted by Ralph Hulslander at 11/1/2005 11:08:02 AM
A Windows 2000 server is being subjected to a continuous stream of FTP login attempts. Essentially this was causeing a denial of service until I set the Event Log to overwrite once full. Is there any way to limit the login attempts? None of the attempts are successful. These attacks come f...more >>

Choose a digital certificate Dialog shows no certificates
Posted by Bill at 11/1/2005 8:48:08 AM
Hello, I'm trying to implement user authentication via certificates for a website. In ISS I selected properties for the website -> Directory Security -> Secure Communications Area (Edit) -> Checked Accept Client Certificates. Going to the website (using https) a dialog box is brough up a...more >>

Relogin with microsoft integrated authentication
Posted by julik at 11/1/2005 5:58:34 AM
Hello, I am using classic ASP with IIS5 on win2000. If Integrated authentication is inabled is there a way to logout a user once they are authenticated? In other words if the user who is logged on to machine is not the same person accessing the site and they want to relogin as themselves, how...more >>

Securing Web Database
Posted by Prabhat at 11/1/2005 12:00:00 AM
Hi All, I have a website setup which has MS-Access DB. The web pages are in ASP and uses ADO to connect to DB. The DB is located in the Folder "/Database". I have the Connection string setup in the Global.asa file. As my virtual Directory is "/" and all files and folders including the "D...more >>

Report of pages set with SSL
Posted by Doug at 11/1/2005 12:00:00 AM
Hello. Is there a way to create a report of all pages on a web site that are set to use SSL encryption? Thanks Doug If replying to me directly, remove REMOVE from my email address. ...more >>


DevelopmentNow Blog