Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008


all groups > iis security > april 2005 > threads for april 15 - 21, 2005

Filter by week: 1 2 3 4 5

SSL doesn't work
Posted by cjobes at 4/21/2005 6:23:03 PM
Hi all, We are trying to get SSL going on one of the websites on a 2003 server. We generated the certificate and it shows up as an option when selecting Sever Certificate under the Security tab on the properties. Everything seems to be fine until we try to connect to the website via https. We ...more >>

SSL Setup
Posted by Willie Bodger at 4/21/2005 3:41:16 PM
OK, here's my dilemma: I have a site with a login script and the usual checking each time you hit a page that requires it. We have finally gotten an SSL cert and it is installed, but from here I am not sure of the best approach to get it implemented. If all of the files pertaining to the area...more >>

IWA with multiple AD
Posted by Tao Tao at 4/21/2005 1:52:02 PM
Hi, have a site on IIS 6.0 configured using IWA only, becaues that site will grab user's logon information to keep track it. people in same AD with IIS server logon fine with no issues. people in other AD (same domain tree, sibling domains) got 401 error. while those users in sibling domai...more >>

Locked out of Frontpage 2002
Posted by Bryan K. Adams at 4/21/2005 9:44:35 AM
Not sure what caused this but I can get to the admin page to manage accounts but if I try to go to the site admin I am locked out? We were running the server in iis 5 isolation mode but we have corrected that problem and switched back to 6. Now I can not add users back to those accounts....more >>

Administrator 401.1 after SP1
Posted by Adam M at 4/20/2005 8:46:52 PM
I'm unable to administer to my sites with my administrator password. Definitely SP1 related is anyone else experiencing the same type issue? Here is the error: You are not authorized to view this page You do not have permission to view this directory or page using the credentials that you...more >>

SharePoint password prompting
Posted by MichaelHensley at 4/20/2005 2:15:01 PM
I have SharePoint installed on Windows Server 2003. I'm accessing it form IE6 on a Windows XP computer logged into the same domain as the server. I'm attempting to configure it so that I don't get prompted for a username and password; however, nothing I do seems to work. I've tried integrated ...more >>

webdav prompts for second password
Posted by tony at 4/20/2005 11:03:12 AM
I have WebDav set up on a 2003 server and everything seems to be working fine. When a user opens a web folder he/she gets prompted to enter credentials and then can browse folders and subfolders that they have access to. The issue is that when they try to open a file like excel or word they...more >>

Why is iis6.log on an XP home machine?
Posted by provasek NO[at]SPAM sbcglobal.net at 4/20/2005 8:28:46 AM
With security concerns that back door trojans can install zombie servers on systems, I am quite concerned that IIS components are installed on my XP home machine, particularly with this log file refering to "returned from France" [4/18/2005 18:52:28] LogFile Open. [***** Search on FAIL/Message...more >>



Service Principal Name Confusion
Posted by boarding_king at 4/20/2005 6:27:02 AM
Setting up IIS 6.0 with Kerberos authentication on sites using domain accounts to run application pools has always caused me problems. I think this is because I never *really* understood what an SPN was and what it was for. Recently I did some reading and I think I've just about got it licked....more >>

FSO exploit
Posted by Savas at 4/20/2005 12:26:02 AM
Hi, My server was hacked over this weekend using the FSO exploit. It is sad that by uploading one simple asp file to one website in a server, hacker can access the whole machine, both drive C and drive D. Well I should have played around with the IUSR permissions not allowing it to access d...more >>

401.1 - Integrated security issue on local machine only
Posted by Chris Kane at 4/19/2005 10:55:03 AM
I recently upgraded our development application server with SP1 for Windows Server 2003 and the Web Services Enhancements 2.0 SP3. Now our developers receive "HTTP Error 401.1 - Unauthorized: Access is denied due to invalid credentials" when they attempt to work on their VS.Net 2003 web ...more >>

SelfSSL Utility - Not working?
Posted by Jody at 4/18/2005 1:26:05 PM
I just downloaded the SelfSSL for the IIS 6.0 resource kit and ran the following command line: selfssl.exe /NCN=MySSL /K:1024 /Vv:7 /S:1 /P:443 I got a message that it was successful however when I go in to "Directory Security" for my in IIS, the "View Certificate" is grayed out. I also get...more >>

Where to find the denied requests for IIS 6
Posted by Keith-Earl at 4/18/2005 7:57:25 AM
We know that the std IIS logs contain the return codes of 401, 402, etc., but we are interested in the URLScan logs that were present in IIS 5 and prior with the URLScan tool was setup. I am told not to run URLScan or IIS Lockdown on an IIS 6 box because that functionality is baked right in...more >>

UrlScan.dll Terminating
Posted by Advertiser at 4/16/2005 11:04:16 AM
Hi there. I've just installed UrlScan.dll and noticed that at the end of the log = that it is terminated. I have several questions: 1) What causes termination of a UrlScan.dll? 2) What should I do to prevent termination of UrlScan.dll in the future? Thanks....more >>

IIS folder structure and security.
Posted by edroszcz NO[at]SPAM gmail.com at 4/15/2005 3:26:17 PM
Hi, Been browsing for some information about how I should organize our Windows 2003 servers running IIS6. Whith organize I mean which folder structure we should use and to to make it secure. The structure I have atm looks like this: D:\Websites ..=2E. D:\Websites\domain1.com D:\Website...more >>


DevelopmentNow Blog