all groups > iis security > january 2005 > threads for january 8 - 14, 2005
Filter by week: 1 2 3 4 5
Anonymous Access on IIS6
Posted by willie thompson at 1/14/2005 3:27:57 PM
Hello,
I'm having an Anonymous access problem which is driving me round the bend !
Basically, I created a website a few years ago, stuck it on a Windows 2000
server and made it live on the internet. Everything was fine, and a month or
so back I upgraded the server to Windows 2003 standard, u... more >>
401 responses with ntlm enabled
Posted by Andy Fish at 1/14/2005 11:47:23 AM
Hi,
I'm using iis6 and my web app is configured for integrated windows
authentication. From a user perspective it looks fine, i.e. you log using
your windows credentials and then you can use the site.
However, looking at the IIS log, every HTTP request gets sent 3 times. the
first 2 tim... more >>
IIS 6 - Possible to limit connections by IP address?
Posted by TeamKaeru NO[at]SPAM gmail.com at 1/14/2005 8:54:05 AM
Hello, it seems that while it is possible to throttle the bandwidth and
to limit the number of concurrent connections to a website in IIS6 /
Server 2003 it is not possible to restrict number of connections by an
IP address.
You can remove an IP address' access completely, but you cannot tell i... more >>
II6 and restrictions by IP address
Posted by Ricki_Ricardo at 1/14/2005 6:37:04 AM
Hello, I have a folder on a Win 2003/IIS 6 box that I wish to restrict access
to by IP address. I have made the changes in Directory Security of the
folder that I want restricted. For test reasons right now it is set to DENY
ALL with no exceptions. Unfortunately I can still access it from m... more >>
ASPs and NTFS permissions
Posted by Brian J Spencer UK at 1/14/2005 3:41:02 AM
Hi there.
I have been successfully running ASP on a W2K IIS5.0 server using Anon
Access enabled, but would like to be able to restrict access to a particular
folder containing ASP content to a particular NTFS user group that I have set
up.
I have added this group to the particular folder... more >>
IIS 6, Application Pools, Thread Count, and Kerberos
Posted by matt wilson at 1/13/2005 6:40:31 PM
I have seen the articles (e.g.
http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/ca_cfgwrkridentity.asp?frame=true)
that mentions odd behavior when using Windows Integrated Aut... more >>
NetBios/shortname not working with Kerberos delegation
Posted by bng NO[at]SPAM plls.com at 1/13/2005 10:20:07 AM
Hi all,
I'm having a problem in which when I use the shortname to access a
website on our intranet I receive the "Login failed for user '(null)'.
Reason: Not associated with a trusted SQL Server connection." error
message. When I use the FQDN of the website the kerberos delegation
works fine... more >>
ASP issue
Posted by Tony Schlak at 1/13/2005 8:31:42 AM
Recently i've noticed that when i create a new .asp page the page does not
work right away. It is not until i run a server health check that all the
problems see to go away. Does anyone have any suggestions on why this
happening.
Tony
... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
SSL Installation
Posted by Bruce at 1/13/2005 8:01:08 AM
We are planning on putting an IIS6 server in our DMZ. It will have a
Verisign SSL certifcate installed. We currently use a Windows 2003 Radius
server for our VPN and Auditing Services. My boss thinks we will need to
install a certificate on both the IIS server and the Radius Server. Would ... more >>
IIS 5 authentication problem
Posted by ermanu NO[at]SPAM hotmail.com at 1/13/2005 4:29:23 AM
Hello,
On a windows xp pro PC (in a domain) we are trying to create a web
site.
We are trying to set integrated windows authentication from the
default web site's directory security.
But it still doesn't ask for a password when someone try to get in.
We also disabled the anonymous access.
Wha... more >>
How do I protect my server (anti-virus/firewall)
Posted by Mark at 1/13/2005 1:13:25 AM
Hi - I have a W2003 Web Edition dedicated server.
It runs web applications which anyone can access on behalf of my
clients.
Should I have Anti-Virus software installed (it's dedicated - and I
don't install any software - could it still come under virus attack).
What should I have setup in... more >>
Integrated Windows Authentication & Non-DomainController Webserver
Posted by G. Sharp at 1/12/2005 9:05:06 PM
Hi Everyone,
I would really appreciate any comments on a problem I've been experiencing
for some time - I've spent hours trying to find the answer to this problem,
and it's hopefully really simple - and I’ve just overlooked it...
I have about 5 Domain Controllers managing my workstations... more >>
IIS6.0 & NAS
Posted by crino at 1/12/2005 7:52:19 PM
Hi at all!
I've a little problem.
I've a web site with storage on a shared folder on a NAS.
The folder is shared to user's domain (Domain\IUSR_WEB).
The web site is configured to connect to the folder with (Domain\IURS_WEB)
and anonymous access,
all work propertly, but i have to lock some file... more >>
Changing the password for iusr and iwam
Posted by BarbS at 1/12/2005 5:03:03 PM
The iusr and iwam passwords get cracked when we run an audit. What do I have
to be aware of if I uncheck let iis manage the password. I want to manually
set a strong password.... more >>
IIS Auth Error - Kerberos/NTLM not accepting credentials
Posted by Colin Bowern at 1/12/2005 4:57:11 PM
I've got a Windows Server 2003 / IIS 6 machine running Windows SharePoint
Services that users are having problems authenticating against. When
someone tries to connect they are prompted for credentials.
-- The Windows XP SP2 client computers have the domain added to the local
intranet zone ("... more >>
IIS 4: Setting up permissions for script folders
Posted by Gus at 1/12/2005 1:23:31 PM
I'm having problems setting up permission for script folders in my IIS
4/WinNT server.
My web site is structured like this:
\Root\
\Root\Scripts\
\Root\Scripts\App1
\Root\Scripts\App2
\Root\Scripts\AppX
Each App1..AppX is configured as an isolated process (to unload each one
separatel... more >>
Help Please
Posted by Arnel at 1/12/2005 12:11:02 PM
Hello,
We have 2 servers running W2K3 Standard Edition. The first server
(let's call it TEST1) is a dc/fs/dns/dhcp. The second server (let's call it
TEST2) is just a webserver and not joined to the dc because for security
reasons, and set to use a workgroup name instead of domain. T... more >>
IIS6 prompting for username and password
Posted by Kevin Wheeler at 1/12/2005 9:37:04 AM
How do I stop IIS6 from prompting for username and password? I have
"enable anonymous access" selected.
Kevin
... more >>
IIS6 - Network Account ?
Posted by Simon Downes at 1/12/2005 9:33:18 AM
Hi,
Does anyone know which security account is used ny IIS to access network
resources such as links to dbases??
many thanks
... more >>
Certificate Export Problem
Posted by cswarr at 1/12/2005 8:21:03 AM
I'm trying to export a verisign cert. from one Win2k3 web server to another.
However, it's not letting me export the private key, just the cert. The
export private key option is greyed out in the wizard. Why is it doing this
and how can I get the cert. installed on my second web server? Th... more >>
Need a suggestion for storing files more securely
Posted by GJ at 1/12/2005 3:30:15 AM
Hello,
Running Win 2000 / IE 5
We have an .asp application which allows our employees to upload invoices
(MS Word format) for our users to various folders in a main folder off the
root of our site. Each customer has their own folder, which is named using a
random 12 character directory n... more >>
SSL Prompt Issue
Posted by D at 1/11/2005 1:37:37 PM
Using Windows 2003 Server and IIS 6, we have set up a
secure site using SSL and certificates.
The site is accessible, except that users get prompted
with the message:
"This site contains both secure and non-secure items. Do
you want to display the nonsecure items?"
Now all referenc... more >>
Basic authentication logon window doesnt Pop, the 2nd time. Any Id
Posted by Sakthi at 1/11/2005 7:43:01 AM
I logon to my server using Basic authentication.
The first time i log on, a logon window is displayed, i type in my uid/pwd
and access the site.
Problem:
--------
Now, i close the window, open the URL in a new browser window for the second
time, the logon window doesnt show up, but still ... more >>
404 problems for simple web service in 2003 but not in 2000
Posted by Varsha at 1/9/2005 1:04:16 PM
Hi,
a) I have a windows 2003 server on my machine with in built .NET
Framework 1.1.
b) I have also installed .NET Framework 1.0 on this machine.
c) I have a web service, when i try to invoke the methods of it, it
returns "404 not found error".
4) I have disabled the IE option "show fri... more >>
problems with SSL
Posted by kidem at 1/8/2005 7:25:39 PM
I have setup a webserver with citrix and certsrv, with 80 i can get to it,
once i check use ssl i can go to it by http://ip_address it says it needs
https:// , which then i use https://ip_address and it doesnt do anything.
any ideas?
... more >>
|