Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
all groups > iis security > march 2005 > threads for march 15 - 21, 2005

Filter by week: 1 2 3 4 5

IIS Security Risks & Vulnerabilities
Posted by Roger Cox at 3/21/2005 2:47:02 PM
I am a web developer needing IIS to develop web pages on my PC. I am trying to get IIS installed on my PC within a fully developed network (e.g. DMZ, Firewalls, Network Servers, & Security). According to the network team, IIS poses too much of a threat to be installed on a user PC within t...more >>


OWA Exploit
Posted by Rex Young at 3/21/2005 1:22:24 PM
http://www.securiteam.com/windowsntfocus/5EP0E20F6C.html Anyone have a fix for this?...more >>

Login security issue.
Posted by Michael at 3/21/2005 10:43:38 AM
I've setup an ASP page to allow users to change their password from a website in ADS. The script I have is working, I can change the password, then login with a workstation with the new password and the old password won't work. However, if I connect to a website requiring basic authenticat...more >>

Integrated Windows Authentication Error,
Posted by Arthur Nyunt at 3/21/2005 10:25:04 AM
Hi, I have three w2k3 servers (live, staging and development) currently being setup to service our Intranet. I have built the servers is an identical fashion and use Integrated Windows Authentication to determine who can see certain links on the page. When initially setup all server...more >>

Firewall and Win 2K
Posted by Stibbs at 3/19/2005 1:05:06 PM
Hello all, I have a home development server and need a simple, easy to use and preferably free firewall. Is there such a thing? If not free at lease good. I have had Symantec’s 2002 firewall running but the updates do not work on Win servers. Much thanks David S ...more >>

IIS metabase permissions when creating new VirDir's
Posted by Tony D at 3/18/2005 1:47:08 PM
Hi, Theoretical, architecture-type question here: -=- If one wants to have an Asp.Net app programmatically create new VirDir's, how should you implement this? Open the doors wide-open to the ASPNET user account? (not!) Some Background: -=- We have an Asp.Net app that we ported from A...more >>

Problem with the "Too many users logged"
Posted by Kamyk at 3/17/2005 9:10:36 PM
Hello all! Sometimes I have a problem with the message: The page cannot be displayed There are too many people accessing the Web site at this time. -------------------------------------------------------------------------- Please try the following: a.....more >>

New SSL Certificate not showing on browsers?
Posted by Transam388 at 3/17/2005 2:19:51 PM
We use IIS 5.0 for Outlook Web Access under a secure https port and have a certificate. The original certificate has been replaced with a new one and the original completly removed yet when you go to the site and double click the little lock on the browser to see the SSL details it is still s...more >>



IUSR issue
Posted by Adam at 3/17/2005 1:59:46 PM
- The server was unable to logon the Windows NT account 'IUSR_HYUNDAI' due to the following error: Logon failure: user not allowed to log on to this computer. The data is the error code. - anyone please? all sites hosted by this web server could not be accessed, after a full system patch. ...more >>

does w2k3 server automatically change user's settings based on time?
Posted by Flip at 3/17/2005 10:37:20 AM
I have five users on my w2k3 server and they are setup to view a specific directory accessible via my website in IIS6. Last weekend my users started to fail their logins. I looked at the user setup and all of them had their properties changed to need to change password on next login. When I...more >>

IIS 6.0 Resource Kit
Posted by Phillip LeMaster at 3/16/2005 1:15:05 PM
We just had our annual security audit. We were advised that we should not have IIS 6.0 tools installed on web server connected to the internet. I can not find any information that states this. Does anyone know Microsoft's policy on resource kit installations?...more >>

IIS Server default user account reset after patching?
Posted by Steve Marshall at 3/16/2005 11:21:07 AM
We have a clustered application that required the use of a specific account for anonymous access. The application was configured with a local user account on each node in the cluster and has been working correctly since November. This week 2 situations occured that caused both nodes in the ...more >>

ASPUSER account problem?
Posted by Cwhitmore at 3/16/2005 8:57:04 AM
I've installed an app that requires ASP.NET 1.1. I'm running on Windows 2k Server, with IIS 5.0, Active Directory and ASP.NET 1.1. I get to the login screen of the app, but I get an error message after that. Here is what I've tried so far: 1.) Created ASPUSER account and given it full access ...more >>

SSL & The page cannot be displayed
Posted by Berre at 3/16/2005 4:31:01 AM
I'm having this huge problem on which I have been working for more than a day now and I'm getting desperate. I'm also running out of time as the site is down at this moment. I hope someone here can give me some input on a possible solution. I have an SSL site which is listening on port 443....more >>

Permissions wizard
Posted by rjolivie at 3/15/2005 7:23:08 PM
I've been trying to figure this out for weeks but have been too stuborn to ask. I created an FTP site using IIS. I run the permissions wizard and there is only one option - public FTP site. (note that public does not allow users to upload). I want users to be able to upload. How do I crea...more >>

404 comes back with a 200 added
Posted by Prabha at 3/15/2005 1:15:02 PM
The webserver receives a 404 response code from an IIS filter. However, when it returns the data to the browser, it appends 200 OK along with the content of the target page. Anyone seen this behavior? Anyone knows how to correct this problem? Thanks, Hema ...more >>

Cannot access default site?
Posted by Cwhitmore at 3/15/2005 9:25:03 AM
I have Win2k Server on Active Directory running IIS 5.0 and acting as an ILS server. When I try to access http://localhost or http://servername I get the following error: EVENT # 39141 EVENT LOG System EVENT TYPE Error SOURCE DCOM EVENT ID 10004 COMPUTERNAME FAX2000 TIME 3/15/20...more >>


DevelopmentNow Blog