all groups > iis security > march 2005 > threads for march 15 - 21, 2005
Filter by week: 1 2 3 4 5
IIS Security Risks & Vulnerabilities
Posted by Roger Cox at 3/21/2005 2:47:02 PM
I am a web developer needing IIS to develop web pages on my PC.
I am trying to get IIS installed on my PC within a fully developed network
(e.g. DMZ, Firewalls, Network Servers, & Security).
According to the network team, IIS poses too much of a threat to be
installed on a user PC within t... more >>
OWA Exploit
Posted by Rex Young at 3/21/2005 1:22:24 PM
http://www.securiteam.com/windowsntfocus/5EP0E20F6C.html
Anyone have a fix for this?... more >>
Login security issue.
Posted by Michael at 3/21/2005 10:43:38 AM
I've setup an ASP page to allow users to change their password from a
website in ADS. The script I have is working, I can change the password,
then login with a workstation with the new password and the old password
won't work.
However, if I connect to a website requiring basic authenticat... more >>
Integrated Windows Authentication Error,
Posted by Arthur Nyunt at 3/21/2005 10:25:04 AM
Hi,
I have three w2k3 servers (live, staging and development) currently being
setup to service our Intranet. I have built the servers is an identical
fashion and use Integrated Windows Authentication to determine who can see
certain links on the page.
When initially setup all server... more >>
Firewall and Win 2K
Posted by Stibbs at 3/19/2005 1:05:06 PM
Hello all,
I have a home development server and need a simple, easy to use
and preferably free firewall. Is there such a thing? If not free at lease
good.
I have had Symantec’s 2002 firewall running but the updates do not work on
Win servers.
Much thanks
David S
... more >>
IIS metabase permissions when creating new VirDir's
Posted by Tony D at 3/18/2005 1:47:08 PM
Hi,
Theoretical, architecture-type question here:
-=-
If one wants to have an Asp.Net app programmatically create new VirDir's,
how should you implement this? Open the doors wide-open to the ASPNET user
account? (not!)
Some Background:
-=-
We have an Asp.Net app that we ported from A... more >>
Problem with the "Too many users logged"
Posted by Kamyk at 3/17/2005 9:10:36 PM
Hello all!
Sometimes I have a problem with the message:
The page cannot be displayed
There are too many people accessing the Web site at this time.
--------------------------------------------------------------------------
Please try the following:
a..... more >>
New SSL Certificate not showing on browsers?
Posted by Transam388 at 3/17/2005 2:19:51 PM
We use IIS 5.0 for Outlook Web Access under a secure https port and have a
certificate. The original certificate has been replaced with a new one and
the original completly removed yet when you go to the site and double click
the little lock on the browser to see the SSL details it is still s... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
IUSR issue
Posted by Adam at 3/17/2005 1:59:46 PM
- The server was unable to logon the Windows NT account 'IUSR_HYUNDAI' due
to the following error: Logon failure: user not allowed to log on to this
computer. The data is the error code. -
anyone please?
all sites hosted by this web server could not be accessed, after a full
system patch.
... more >>
does w2k3 server automatically change user's settings based on time?
Posted by Flip at 3/17/2005 10:37:20 AM
I have five users on my w2k3 server and they are setup to view a specific
directory accessible via my website in IIS6. Last weekend my users started
to fail their logins. I looked at the user setup and all of them had their
properties changed to need to change password on next login. When I... more >>
IIS 6.0 Resource Kit
Posted by Phillip LeMaster at 3/16/2005 1:15:05 PM
We just had our annual security audit. We were advised that we should not
have IIS 6.0 tools installed on web server connected to the internet. I can
not find any information that states this. Does anyone know Microsoft's
policy on resource kit installations?... more >>
IIS Server default user account reset after patching?
Posted by Steve Marshall at 3/16/2005 11:21:07 AM
We have a clustered application that required the use of a specific account
for anonymous access. The application was configured with a local user
account on each node in the cluster and has been working correctly since
November. This week 2 situations occured that caused both nodes in the
... more >>
ASPUSER account problem?
Posted by Cwhitmore at 3/16/2005 8:57:04 AM
I've installed an app that requires ASP.NET 1.1. I'm running on Windows 2k
Server, with IIS 5.0, Active Directory and ASP.NET 1.1. I get to the login
screen of the app, but I get an error message after that. Here is what I've
tried so far:
1.) Created ASPUSER account and given it full access ... more >>
SSL & The page cannot be displayed
Posted by Berre at 3/16/2005 4:31:01 AM
I'm having this huge problem on which I have been working for more than a day
now and I'm getting desperate. I'm also running out of time as the site is
down at this moment. I hope someone here can give me some input on a possible
solution.
I have an SSL site which is listening on port 443.... more >>
Permissions wizard
Posted by rjolivie at 3/15/2005 7:23:08 PM
I've been trying to figure this out for weeks but have been too stuborn to ask.
I created an FTP site using IIS. I run the permissions wizard and there is
only one option - public FTP site. (note that public does not allow users to
upload). I want users to be able to upload. How do I crea... more >>
404 comes back with a 200 added
Posted by Prabha at 3/15/2005 1:15:02 PM
The webserver receives a 404 response code from an IIS filter. However, when
it returns the data to the browser, it appends 200 OK along with the content
of the target page. Anyone seen this behavior? Anyone knows how to correct
this problem?
Thanks,
Hema ... more >>
Cannot access default site?
Posted by Cwhitmore at 3/15/2005 9:25:03 AM
I have Win2k Server on Active Directory running IIS 5.0 and acting as an ILS
server. When I try to access http://localhost or http://servername I get the
following error:
EVENT # 39141
EVENT LOG System
EVENT TYPE Error
SOURCE DCOM
EVENT ID 10004
COMPUTERNAME FAX2000
TIME 3/15/20... more >>
|