Psst! Did you know DevelopmentNow is a mobile web site design agency?

Contact us for help mobilizing your site, or to sign up for our beta Mobile Web SDK!


Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > iis security > january 2005 > threads for january 8 - 14, 2005

Filter by week: 1 2 3 4 5

Anonymous Access on IIS6
Posted by willie thompson at 1/14/2005 3:27:57 PM
Hello, I'm having an Anonymous access problem which is driving me round the bend ! Basically, I created a website a few years ago, stuck it on a Windows 2000 server and made it live on the internet. Everything was fine, and a month or so back I upgraded the server to Windows 2003 standard, u...more >>


401 responses with ntlm enabled
Posted by Andy Fish at 1/14/2005 11:47:23 AM
Hi, I'm using iis6 and my web app is configured for integrated windows authentication. From a user perspective it looks fine, i.e. you log using your windows credentials and then you can use the site. However, looking at the IIS log, every HTTP request gets sent 3 times. the first 2 tim...more >>

IIS 6 - Possible to limit connections by IP address?
Posted by TeamKaeru NO[at]SPAM gmail.com at 1/14/2005 8:54:05 AM
Hello, it seems that while it is possible to throttle the bandwidth and to limit the number of concurrent connections to a website in IIS6 / Server 2003 it is not possible to restrict number of connections by an IP address. You can remove an IP address' access completely, but you cannot tell i...more >>

II6 and restrictions by IP address
Posted by Ricki_Ricardo at 1/14/2005 6:37:04 AM
Hello, I have a folder on a Win 2003/IIS 6 box that I wish to restrict access to by IP address. I have made the changes in Directory Security of the folder that I want restricted. For test reasons right now it is set to DENY ALL with no exceptions. Unfortunately I can still access it from m...more >>

ASPs and NTFS permissions
Posted by Brian J Spencer UK at 1/14/2005 3:41:02 AM
Hi there. I have been successfully running ASP on a W2K IIS5.0 server using Anon Access enabled, but would like to be able to restrict access to a particular folder containing ASP content to a particular NTFS user group that I have set up. I have added this group to the particular folder...more >>

IIS 6, Application Pools, Thread Count, and Kerberos
Posted by matt wilson at 1/13/2005 6:40:31 PM
I have seen the articles (e.g. http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/ca_cfgwrkridentity.asp?frame=true) that mentions odd behavior when using Windows Integrated Aut...more >>

NetBios/shortname not working with Kerberos delegation
Posted by bng NO[at]SPAM plls.com at 1/13/2005 10:20:07 AM
Hi all, I'm having a problem in which when I use the shortname to access a website on our intranet I receive the "Login failed for user '(null)'. Reason: Not associated with a trusted SQL Server connection." error message. When I use the FQDN of the website the kerberos delegation works fine...more >>

ASP issue
Posted by Tony Schlak at 1/13/2005 8:31:42 AM
Recently i've noticed that when i create a new .asp page the page does not work right away. It is not until i run a server health check that all the problems see to go away. Does anyone have any suggestions on why this happening. Tony ...more >>



SSL Installation
Posted by Bruce at 1/13/2005 8:01:08 AM
We are planning on putting an IIS6 server in our DMZ. It will have a Verisign SSL certifcate installed. We currently use a Windows 2003 Radius server for our VPN and Auditing Services. My boss thinks we will need to install a certificate on both the IIS server and the Radius Server. Would ...more >>

IIS 5 authentication problem
Posted by ermanu NO[at]SPAM hotmail.com at 1/13/2005 4:29:23 AM
Hello, On a windows xp pro PC (in a domain) we are trying to create a web site. We are trying to set integrated windows authentication from the default web site's directory security. But it still doesn't ask for a password when someone try to get in. We also disabled the anonymous access. Wha...more >>

How do I protect my server (anti-virus/firewall)
Posted by Mark at 1/13/2005 1:13:25 AM
Hi - I have a W2003 Web Edition dedicated server. It runs web applications which anyone can access on behalf of my clients. Should I have Anti-Virus software installed (it's dedicated - and I don't install any software - could it still come under virus attack). What should I have setup in...more >>

Integrated Windows Authentication & Non-DomainController Webserver
Posted by G. Sharp at 1/12/2005 9:05:06 PM
Hi Everyone, I would really appreciate any comments on a problem I've been experiencing for some time - I've spent hours trying to find the answer to this problem, and it's hopefully really simple - and I’ve just overlooked it... I have about 5 Domain Controllers managing my workstations...more >>

IIS6.0 & NAS
Posted by crino at 1/12/2005 7:52:19 PM
Hi at all! I've a little problem. I've a web site with storage on a shared folder on a NAS. The folder is shared to user's domain (Domain\IUSR_WEB). The web site is configured to connect to the folder with (Domain\IURS_WEB) and anonymous access, all work propertly, but i have to lock some file...more >>

Changing the password for iusr and iwam
Posted by BarbS at 1/12/2005 5:03:03 PM
The iusr and iwam passwords get cracked when we run an audit. What do I have to be aware of if I uncheck let iis manage the password. I want to manually set a strong password....more >>

IIS Auth Error - Kerberos/NTLM not accepting credentials
Posted by Colin Bowern at 1/12/2005 4:57:11 PM
I've got a Windows Server 2003 / IIS 6 machine running Windows SharePoint Services that users are having problems authenticating against. When someone tries to connect they are prompted for credentials. -- The Windows XP SP2 client computers have the domain added to the local intranet zone ("...more >>

IIS 4: Setting up permissions for script folders
Posted by Gus at 1/12/2005 1:23:31 PM
I'm having problems setting up permission for script folders in my IIS 4/WinNT server. My web site is structured like this: \Root\ \Root\Scripts\ \Root\Scripts\App1 \Root\Scripts\App2 \Root\Scripts\AppX Each App1..AppX is configured as an isolated process (to unload each one separatel...more >>

Help Please
Posted by Arnel at 1/12/2005 12:11:02 PM
Hello, We have 2 servers running W2K3 Standard Edition. The first server (let's call it TEST1) is a dc/fs/dns/dhcp. The second server (let's call it TEST2) is just a webserver and not joined to the dc because for security reasons, and set to use a workgroup name instead of domain. T...more >>

IIS6 prompting for username and password
Posted by Kevin Wheeler at 1/12/2005 9:37:04 AM
How do I stop IIS6 from prompting for username and password? I have "enable anonymous access" selected. Kevin ...more >>

IIS6 - Network Account ?
Posted by Simon Downes at 1/12/2005 9:33:18 AM
Hi, Does anyone know which security account is used ny IIS to access network resources such as links to dbases?? many thanks ...more >>

Certificate Export Problem
Posted by cswarr at 1/12/2005 8:21:03 AM
I'm trying to export a verisign cert. from one Win2k3 web server to another. However, it's not letting me export the private key, just the cert. The export private key option is greyed out in the wizard. Why is it doing this and how can I get the cert. installed on my second web server? Th...more >>

Need a suggestion for storing files more securely
Posted by GJ at 1/12/2005 3:30:15 AM
Hello, Running Win 2000 / IE 5 We have an .asp application which allows our employees to upload invoices (MS Word format) for our users to various folders in a main folder off the root of our site. Each customer has their own folder, which is named using a random 12 character directory n...more >>

SSL Prompt Issue
Posted by D at 1/11/2005 1:37:37 PM
Using Windows 2003 Server and IIS 6, we have set up a secure site using SSL and certificates. The site is accessible, except that users get prompted with the message: "This site contains both secure and non-secure items. Do you want to display the nonsecure items?" Now all referenc...more >>

Basic authentication logon window doesnt Pop, the 2nd time. Any Id
Posted by Sakthi at 1/11/2005 7:43:01 AM
I logon to my server using Basic authentication. The first time i log on, a logon window is displayed, i type in my uid/pwd and access the site. Problem: -------- Now, i close the window, open the URL in a new browser window for the second time, the logon window doesnt show up, but still ...more >>

404 problems for simple web service in 2003 but not in 2000
Posted by Varsha at 1/9/2005 1:04:16 PM
Hi, a) I have a windows 2003 server on my machine with in built .NET Framework 1.1. b) I have also installed .NET Framework 1.0 on this machine. c) I have a web service, when i try to invoke the methods of it, it returns "404 not found error". 4) I have disabled the IE option "show fri...more >>

problems with SSL
Posted by kidem at 1/8/2005 7:25:39 PM
I have setup a webserver with citrix and certsrv, with 80 i can get to it, once i check use ssl i can go to it by http://ip_address it says it needs https:// , which then i use https://ip_address and it doesnt do anything. any ideas? ...more >>


DevelopmentNow Blog