Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > iis security > april 2005 > threads for april 1 - 7, 2005

Filter by week: 1 2 3 4 5

encrypting and signing
Posted by John Grandy at 4/7/2005 3:50:18 PM
I understand the use of public/private keys for encrypting. Could someone explain to me how a second public/private key pair is used for signing? Thanks. ...more >>


NTFS permissions
Posted by Darren at 4/7/2005 8:05:08 AM
I'm going in circles trying to figure this out without any luck. I disabled anonomous access and am using basic authentication (integrated unchecked as well). I have created a local user on the IIS 6.0 server and assigned this user NTFS permissions to directories in question. From the out...more >>

IIS changing authentication
Posted by j1c at 4/7/2005 8:01:44 AM
I have a site that has to use basic authentication because of the MS proxy server the clients are behind. Anyhow, whenever a sub site is created the authentication is changed to use Windows Authentication & Basic. Any idea how to stop this? ...more >>

Permission denied: 'CreateObject' - error '800a0046'
Posted by Luca Ferrari at 4/7/2005 1:43:02 AM
Hi, I have a problem with the asp file <% dim objWebDav set objWebDav = CreateObject("WebDavRedirect.Redirect") objWebDav.Redirigi "http://testdevserver02.gmserv.com/prova.asp" set objWebDav = Nothing %> The error message is Microsoft VBScript runtime error '800a0046' Permission den...more >>

IIS 5 Compromisation
Posted by Saturday Night Paulsy at 4/6/2005 8:45:35 PM
Hi all, my company has several servers acting as web servers hosted at an ISP and one of them was compromised by some warez bunnies. All the server have the latest patches and anti virus software running, but no firewall... Several files appeared in a folder off one of the webs, being ki...more >>

client certificates
Posted by Shaun Wilde at 4/6/2005 7:35:27 PM
am using client certificates to provide access to a web site. Once a user is logged in - how do they log out? Also how do I force the site to force the presentation of the certificate again - say on session timeout etc etc? ie a forced log out. Thanks Shaun Wilde ...more >>

Indexing Service, web page, no results... Permissions?
Posted by chrissobo.spam NO[at]SPAM gmail.com at 4/6/2005 2:25:42 PM
Hi there. I've been working on a web page that allows you to search one of our indexes. This index is setup and is running on a folder. If I query the index from inside of "Computer Management" on our live machine I get results. If I use my asp script to do it on our live machine, I get no resul...more >>

prevent local security policy override
Posted by TW at 4/6/2005 11:45:13 AM
I need to set the "log on as a batch job" security policy for an application that uses IIS. I find that after each re-boot, my local setting are wiped out and reset, even if I log on to a non-networked, local account. So even though I am not on a network, there is some domain or group setting ...more >>



ASP.NET making COM calls on IIS6
Posted by Dave Williams at 4/6/2005 11:36:02 AM
Hi all, I've seen a few instances of issues like the following in this group and tried numerous suggested fixes, but can't seem to get beyond the problem, so any suggestions would be appreciated. ISSUE: Our ASP.NET application connects to a COM service. This works fine (either with IIS 5 or...more >>

Strange IIS 5 problem with client certificates
Posted by rlusian at 4/6/2005 10:53:01 AM
Hello! We are having a strange IIS 5.0 problem involving client certificates. The situation is this: We have a system with a central server running Win2K and IIS 5.0, with the web site secured using client certificates and a CTL. Remote Linux-based embedded devices running OpenSSL and ...more >>

Modifying the iis metabase permission on iis 5.0
Posted by sachin at 4/6/2005 10:37:02 AM
HI All; I am using utility "Metaacl" from microsoft to modify the permissions on the iismetabase path. When I give Metaacl.vbs "IIS://LOCALHOST/W3SVC/3/ROOT" domain\testpo07 R it gives error 438. I am trying this on win200 server with iis 5.0. Any idea or anyone help why this occurs? ...more >>

derive public certificate from private
Posted by John Grandy at 4/5/2005 5:53:38 PM
How to derive a public key certificate from a private key certificate ? I am in Microsoft Management Console with the Certificates plug-in. ...more >>

Problem with my Web Site Security
Posted by Bernard at 4/5/2005 7:25:01 AM
I have just installed IIS 6.0 W2k3. When you attempted to open the web site it is prompting for a password. I do not know what I am missing. I checked http://support.microsoft.com/kb/185874/ and http://support.microsoft.com/?id=258063 documents. I did not set a password for the IUSR_serv...more >>

Crashing IIS
Posted by public32 at 4/4/2005 10:31:05 PM
hi, I have a simple question. I am using vbscript on a site to get users to upload pictures to my site view them on the site. my vbscript basically checks the extension of the file and if the file is either jpg, jpeg or gif it allows the upload. my question is, is it possible for someone to ...more >>

Passing credentials from IIS to another resource
Posted by TPowell_3557 at 4/4/2005 8:03:02 PM
My VB.Net page (running on IIS) needs to access the file system on another Windows server in the AD. Me.User shows my userID and that I am authenticated but when I call a directory on the file server the log shows an attempt at anonymous login and the error message is "Access to path ... is ...more >>

What is HTTP compression ?
Posted by Backup at 4/4/2005 3:17:51 PM
What is HTTP compression and does it work I was thinking of enabling this on my iis6 server but wasn't sure what it would do. Please help or provided info sources for to me have a better understanding. I have also found some 3rd party tool http://port80software.com/products/httpzip/ bu...more >>

Getting prompted on IIS web
Posted by Keith-Earl at 4/4/2005 2:25:40 PM
We have run a .NET app on a test and prod server for months. We are running IIS 5 on Windows 2000 and are fully patched with current versions of ADO. In order to browse the application we only use the server name in the URL. For example: http://MyServer/MyApp/default.aspx . We are not prompt...more >>

IIS 5 FTP security
Posted by James D. Buskirk at 4/4/2005 11:03:52 AM
I am familiar [but not an expert] with administrating NTFS rights with the SECURITY tab, and creating users. I have multiple FTP sites running on multiple IP addresses using IIS 5 under Win 2000 with SP4. I can create a user, give him rights to his FTP site via the SECURITY tab, and he can ...more >>

IIS 6 Integrated Authentication and IE 6 - security credentials seem to not get passed from browser to server
Posted by Andy Wright at 4/4/2005 10:37:33 AM
Hi, I have an IIS 6 application on Windows 2003 SP1 configured to use integrated authentication. It runs in an application pool that is configured with a specific user name and password. If I connect to the web site using IE 6 hosted on a machine running NT 4 everything works fine. When ...more >>

Anonymous access
Posted by finding.alan NO[at]SPAM gmail.com at 4/3/2005 6:36:50 PM
Hi All, I have a server 2003 and running well with integrated IIS 6. I have a problem when anonymous user can go to IIS web page but cannot access file. The error was HTTP and 404. I realise that this error only occur when the PC was not login to domain. Is there a way to allow those mobile u...more >>

Anonymous access Vulnerabilities
Posted by Jayhawktuba at 4/1/2005 2:59:02 PM
I am trying to dig up any documented issues where having IIS sites set for anonymous access causes the webs or server to be more vulnerable to attack. From what I can tell, if an attacker penetrated your firewall and got in, all he wouldbe able to do (for themost part) is browse anonymous sit...more >>

Change in ASP.Net authentication between Win2000 and Win2003
Posted by Craig Banks at 4/1/2005 10:42:22 AM
We are in the process of migrating an intranet web server from a Windows 2000 box to a Windows 2003 box. In migrating OSs and from IIS 5 to IIS 6, we've noticed a significant difference in how Windows integrated security works with our ASP.Net web pages. For our web sites where directory se...more >>

IE browser "NO COOKIES" is ignored for 1 site; works for another; same scripts (Cross-posted to inetserver.iis)
Posted by l.woods at 4/1/2005 6:30:20 AM
This was cross-posted to inetserver.iss. Sorry, but I HAVE to get an answer to this problem! I have a simple ASP stript that writes a cookie. I have set IE to "No Cookies - Prompt". I run the script from a site and I get the prompt. This works O.K; i.e., as expected. THEN, I run EXACTLY...more >>


DevelopmentNow Blog