Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
all groups > iis security > july 2005

Filter by week: 1 2 3 4 5

Trace SSL Handshake
Posted by Mat Kramer at 7/29/2005 9:06:41 AM
Hi all, Is there any way to trace the SSL handshake, or to programmatically intercept some of the results. I'm interested in determining what cipher suite was negotiated for a given connection. Similar to what you can see under IE File Properties when you have a secure connection, for exampl...more >>


Strange link to file:/// problem
Posted by Bent Cazper Kjeldsen at 7/29/2005 12:00:00 AM
Hi. I don't know if this is the right news group, but I try :-) I make a plain htm file (test.htm) with an anchor to a file <html><body> <a href="file:///c:\Temp\Test.DOC">Test</A> </body></html> (Could also be link to a file on a shared networkdrive or a share) Run this from C:\ in...more >>

Help!!!
Posted by CL at 7/28/2005 3:32:02 AM
Hi all, This is what I am trying to achieve. I am writing a web application to allow my users to submit their documents for faxing. I have tested it using bmp and txt file and both seems to be ok. When I try to test with excel of word document, it gives me error. From the applicaiton event ...more >>

Troubles connecting to 'WinNT://' provider
Posted by A.Klimkin at 7/28/2005 12:00:00 AM
Hi there! I've got the following VB script: Set Group=GetObject("WinNT://MyDomain/Domain Admins") Set User=GetObject("WinNT://MyDomain/SomeUser") Wscript.Echo Group.IsMember(User.ADsPath) Being placed in .vbs file and ran with wscript shell, this code works just fine and returns '-1' (whi...more >>

SSL Certificates
Posted by huppy at 7/27/2005 3:23:01 PM
I am looking for information to get started using SSL certificates. What I want to accomplish is to have a web site that requires certificates and will not allow anyone to connect to that website unless the end user has the certificate, effectively blocking everyone else from acessing the sit...more >>

HTTPS design question
Posted by NO[at]SPAM at 7/27/2005 3:10:06 AM
Hi there, We have a tomcat servlet container which runs in the context of HTTPS. We have created a self signed certificate using keytool and this is stored in the tomcat environment (this certificate has the expiration date as well). We are having a client which basically is an applet which c...more >>

Remote user authentication question
Posted by A.Klimkin at 7/27/2005 12:00:00 AM
Hello, NG I'm a beginner web developer, so please be patient on answering my question :-) I've IIS6 web server and some plain ASP web application. IIS server and all my clients all running within same AD domain. All cients running IE6SP1. I want to generate different html output for remote ...more >>

WEBDAV Authentication
Posted by steve.blandford NO[at]SPAM gmail.com at 7/26/2005 1:59:42 PM
I'm trying to implement WEBDAV on a W2k3 server and to connect using XP pro. I've set up a website just for this purpose. I created a new A record in the DNS (docs.xyz.com) and created the website using host headers. I created a virtual directory, lets call it 'mydocs'. I gave domain user...more >>



can not log anonymous in to IIS6 -
Posted by France at 7/26/2005 9:15:01 AM
Hi, On windows2003, IIS6 on the virtual folder, I select Anonymous authentication, than I see username= domainname\servername and pwd it blank. But when I try to get acces to that viratual folder through the web, it does'nt work and return error 401.1. When I already leave anonymous authen...more >>

WSUS Security Nightmare
Posted by Wknight at 7/25/2005 5:44:02 AM
Hello I've installed WSUS over our Windows 2003 DC. Until now WSUS is being unable to contact the selfupdate folder which is causing that the WSUS stop responding. The error that I'm getting is a 401 (authentication). In the WSUS log there are many entries which show that the application re...more >>

Single SignOn and Integrated Windows Authentication
Posted by laxmikanth at 7/25/2005 12:00:00 AM
Hello, We have an ASP based web application running on IIS5.0 that relies on Integrated Windows Authentication for Authentication. This essentially means we do not have an user management of our own in the application. However, we have simple role based authorization module based on User ident...more >>

Multi vs Single Homed Web Servers - Security and Performance
Posted by zippo76 at 7/24/2005 3:13:56 PM
I have a network architecure/security question on a 30 server 2K3/IIS6/SQL web site. Our web servers are currently multihomed with separate physical cards and 100 or 1GB vlans for internet, sql access, and admin/updating. Netbios is turned off on the internet and db cards, and the third connec...more >>

How do you enable IIS 5.1 to write to application log in event vierwer.
Posted by Jeffrey Exconde at 7/22/2005 6:13:52 PM
Hi, How do you enable IIS 5.1 to write to application log in event vierwer. = I can do it in IIS 6 but could not find information on how to set it up = in IIS 5.1 Thanks Jeff...more >>

Controlling an individual Virtual Directory's security
Posted by Mike Warden at 7/22/2005 12:00:00 AM
I am new to ISS, and must admit Windows security is a bit of a mystery to me also, but I'm trying to write a .NET Web Service that programatically creates new Virtual Directories as required off an existing pre-defined Virtual Directory. The service works fine when I edit the "Default Web S...more >>

How to enable event logging IIS 5.1
Posted by Jeffrey Exconde at 7/21/2005 3:42:20 PM
Hi, How do you enable event logging in IIS 5.1 Thanks ...more >>

IIS 5.1 : Default Web Site "Server Certificate"
Posted by John Grandy at 7/21/2005 1:49:17 PM
I am on Windows XP Pro SP2, IIS 5.1 In IIS.msc, on "Default Web Site", right-click "Properties", go to "Directory Security" tab, click "View Certificate" button: Issued To = "localhost" Friendly Name = "SoloffWeb" This properties exactly match the cert I just created using "Server Cert...more >>

URLScan not blocking/logging anything (W2k3, IIS6)
Posted by Scott at 7/21/2005 12:41:42 PM
Hi, I have installed URLScan on my W2k3 web server, and it appears to be loaded correctly (green up-arrow in the ISAPI filters tab), but it is not functioning at all. It is not blocking the extensions it should block, nor is it generating a log file. Any ideas why this would happen? I have...more >>

Writing to a Virtual Directory
Posted by GregP at 7/21/2005 5:48:41 AM
I have a web app that receives XML, parses it, runs it against a database, then sends this data back as XML. When the file is received, a corresponding text file that contains the data being received is created in a virtual directory. This configuration runs fine in IIS 5.1 on XP Pro. But ...more >>

WSUS and IIS Lockdown tool configuration
Posted by DanielM at 7/21/2005 5:46:03 AM
I have a SBS 2K and I am trying to install WSUS. When access the control panel I get the following error "Server Error in '/WSUSAdmin' Application" some suggest that the lockdown tool works. I install the lockdown tool but that software doesn't allow me to configure it. It idicates it is resto...more >>

certificates and sub-webs of Default Web Site
Posted by John Grandy at 7/20/2005 7:42:35 PM
In IIS 5.1 and IIS 6.0 , do sub-webs of "Default Web Site" automatically inherit a Server Certificate established for a "Default Web Site" ? I see that my sub-webs all have the "View Certificate" button enabled , but the "Server Certficate" button disabled. I see that my "Default Web Site"...more >>

IIS6.0 prompting for logon
Posted by Kevin Wheeler at 7/20/2005 6:07:40 PM
How do I stop IIS6.0 from prompting for a username and password? enable anonymous access is checked and integrated Windows authenication is also selected. Kevin ...more >>

Is this scenario supported?
Posted by me at 7/20/2005 1:00:01 PM
Have an ASP.Net web application which needs to: 1) access an SQL server database (not a local server) 2) restrict access to the web application to a set of users We'd like to configure the web application to access the database using a single, specific account and an Application Pool. Easy....more >>

IIS and EFS
Posted by Ageen at 7/20/2005 10:46:07 AM
Hi, We are planning to use either IIS 5.0 or 6.0 for some internal use. All of our users must go through a single sign on authentication first before they can use any one of the available services. I was wondering if we use EFS to encrypt the IIS root folder, when the end users coming to our...more >>

401.1 - Integrated Security Error when using VB application
Posted by Tim at 7/20/2005 4:34:02 AM
Hi, I have a windows 2003 server (no service packs) running on Microsoft Virtual Server. I have set up a simple asp page running under iis 6.0 with integrated security. I can access the asp page through IE running on a client laptop (XP SP1), however a VB application on the same machi...more >>

IIS 6.0 Windows Integrated Authentication Problem - 401.2 Error
Posted by manjos at 7/19/2005 8:22:23 AM
Hi, Problem Description: The problem occurs when I create a new website in IIS 6.0, I disable anonymous access and enable only Windows Integrated Authentication. I place a simple html page in the directory and try to browse to it using IE 6.0 SP1. I immediately receive an error (HTTP Error ...more >>

Authentication is not wanted.
Posted by Paul at 7/19/2005 12:00:00 AM
I have a web server (2003) IIS6 Whenever a different computer connects to the web site, they get a username and password request, but "Enable anonymous access" is on for the web site. If I remove the option "Integrated Windows authentication" then the page immediately fails to load with "You a...more >>

PBL: TI Assembly.Net installation ERROR after Windows Server 2003 Service Pack 1 installation
Posted by Ruben at 7/19/2005 12:00:00 AM
Hi all, We encountered some problems installaing assembli.net (.dll) no a server with Windows server 2003 (SP1) + his 2004. When we try to deploy the assembly whit "TI New object wizard", we recive an error: ---------------------------------------------------------------------------- -----...more >>

Why is login requesting domain for some users?
Posted by Frank Rowe at 7/18/2005 4:44:56 PM
I have a public web with a few restricted sub-webs, which I authenticate using basic (clear text) authentication. For most users when they try to access a restricted sub-web, they're prompted for username & password. When they supply these, they're in OK. For a few users, their prompt includes u...more >>

IISADMPWD - IIS6
Posted by Eric at 7/18/2005 1:47:34 PM
In IIS6, MS says the IISADMPWD virtual directory needs to run in the same virtual directory as the application that the user is trying to sign on to, so they can change their password. I have quite a few applications that users sign-on to and I really don't want to run them all in the same pool....more >>

Sharepoint Site works with Basic not with Integrated
Posted by Alex at 7/18/2005 12:51:09 PM
We are currently working on a sharepoint site with Analysis services. Whenever we try to autheticate using the internal FQDN of the server with integrated authentication it works. However if we use inegrated with the Internet DNS it fails and gives Kerberos errors. If I change it to Basic a...more >>

Basic auth without dialog - no database
Posted by bschoen NO[at]SPAM rogers.com at 7/18/2005 10:02:27 AM
Our site (IIS on W2K) security uses Basic Authentication with SSL. We now have a request from our parent company to allow users authenticated on their site to have access to protected areas of our site without popping up the authentication dialog again. Is there any way to do this without chan...more >>

Integrated Authenticatoin - Default to the main domain
Posted by Jonathan Palmer at 7/18/2005 8:39:06 AM
I have a Windows 2003/IIS 6.0 application running on a machine that is a member of the domain but is not a domain controller. If a user goes to this site and fills in their unqualified user name (i.e. without a domain name), the authenticeation fails (as the IIS tries to authenticate agains...more >>

Not authorized to view page IIS5
Posted by Dave T at 7/18/2005 7:27:01 AM
Hello, I am running IIS5 and have restricted access to a folder that is on our web site. I am trying to set this up so that when someone tries to view a page that is in a folder they do not have access to they get a you are not authorized to view this page...instead they are prompted for use...more >>

secure ftp
Posted by param NO[at]SPAM community.nospam at 7/16/2005 10:32:53 AM
Hi all, Is it possible to setup secure FTP in IIS 6? Ideally using SSL? If so, how can I do it? I dont see any options in the IIS control panel for the ftp site. TIA ...more >>

How secure is IIS 6?
Posted by James at 7/16/2005 4:12:01 AM
Hello there, I am a newbie to IIS but I need to host a forum on my own server for various reasons. I am wondering how secure is IIS, it will be on win Server 2003 and behind a simple Netgear Router firewall, that is it. Will I need to purchase a proper firewall or some extra software, or d...more >>

IIS authentification with a ASP Application on a SAMBA host
Posted by jtolksdo NO[at]SPAM hotmail.com at 7/15/2005 4:33:32 PM
Hi, I'd like to upload files within a asp.NET web-application through Microsoft IIS 6.0 to a SAMBA network share, which requires an authentication. The SAMBA Server is not a member of a domain. The Windows 2003 Server either not. Both are dedicated Server. The Webser has two NIC. One is con...more >>

When I use ip address for the URL, it requires Windows Authenticat
Posted by Prem Mehrotra at 7/15/2005 11:01:03 AM
I am using IIS 5.0 on Windows 2000. I have set up a web site and it has been working fine. To access web-site o uses a URL like: https://pqms1.xyz.com Some of users do not have DNS, so they are using ip address instead of server name, https://10.4.3.106 However when IP adrress is used, ...more >>

firewall suggestions?
Posted by Dave at 7/15/2005 12:00:00 AM
running win2kpro with iis for my personal web site. my good router with hardware firewall is broke, so i went back to an older one that doesn't have a firewall. so i put on an old zonealarm (2.6 i think) and everything was fine with iis. but i was having trouble accessing the drive shares f...more >>

IIS6 NT Authentication fails
Posted by Brad at 7/14/2005 5:34:15 PM
I just rebuilt my win2k3 pc and in rebuilding my web sites I can't get nt authenticaiton to work for any web app on any web site: all worked correctly before the rebuild. Here are some of the details of how my pc is set up and the problem: - My pc is win2k3 sp1 - I am a administrator on m...more >>

Running IIS MMC from workstation
Posted by -=gu=- at 7/14/2005 2:11:08 PM
Hello, I am the win2K server admin and one of our groups wants to administer a very dynamic new website where they will be constantly be putting up quick pages for different clients to see. I have gone into IIS and properties of the website and have added an AD test user to the Operators ta...more >>

http to https redirect problem
Posted by msnews.microsoft.com at 7/14/2005 12:00:00 AM
I have a website with a SSL certificate and have a need for anyone who browses to the website with http to be redirected to https. I created a custom 403.4.htm page. and tested it. My problem is that I constantly get error page 403.htm and cannot see this in the MMC for IIS on the custom err...more >>

IIS 5 - Integrated Windows Authentication Issues
Posted by Kirk Potter at 7/13/2005 3:53:00 PM
Hi, We have a Windows 2000 Server running IIS 5 and we are having problems with integrated windows authentication but only with some clients. For testing purposes I have been using WFetch on the server itself and we are getting HTTP 401.1: Unauthorized Login Failed. The application we a...more >>

Problem Moving Up to IIS6
Posted by Jeff Miller at 7/13/2005 3:10:36 PM
We have been using IIS5 for years and are familiar with its operation. We had to build a new server for internal use however and it has Win2003 and IIS6 installed. We copied our old site to the new server, changed the home directory on the default website in IIS to where we copied our files ...more >>

How to create a Client certificate
Posted by Lara at 7/13/2005 1:10:14 PM
Hi, I've created a Server Cerificate for My Windows 2000 server. Now i want to create the Client certificate for the clients connected to this server. I tried several methods. Can anyone help in creating the Client certificates . I've created the certificate in IIS->webserverName->rightClick p...more >>

SSL Issue - Urgent
Posted by smith at 7/13/2005 9:24:07 AM
We have an f5 ssl offloader that is used in front of IIS 6.0. A https request comes to the SSL offloader and is forwarded over http to a webserver with the JRun plugin.The problem occurs if the original request is redirected by a IIS/JRun application. The redirected request becomes an http ...more >>

IIS 5 file level security
Posted by andrena at 7/13/2005 12:00:00 AM
Probably simple question but: I need to have a logon and password scree popup when a couple particular files are accessed on a website. I a using Server 2000 and IIS 5. Here is the site and an example of how it should work, click on "clien 1": http://www.hohneng.com/clientdata/clientdata.htm ...more >>

Certificate Question
Posted by jim at 7/12/2005 10:53:15 AM
I'm about to migrate a Verisign certificate from our existing Ex2k OWA server to a new Ex2k3 OWA server. My question is this: Does the server name need to stay the same for the cert to be valid? Verisign says: "VeriSign Server IDs can only be used on Web servers using the Common Name spec...more >>

Http Error 401.1
Posted by pectrap at 7/12/2005 10:38:09 AM
ENVIRONMENT: IIS 6.0 Integrated Windows Authenication Users have permission to website Project Server 2003 Sp 1 MS Project 2003 Client ERROR: 401.1 - Unauthorized: Access is denied due to invalid credentials. BEHAVIOR: When we try to publish a project to the project server we get the ...more >>

HTTP TRACE verb on IIS 6.0
Posted by Omid at 7/12/2005 10:16:04 AM
Hi, I am using IIS 6.0 resource kit "Wfetch" utility to check my IIS 6.0 web server for HTTP TRACE verb. If I send a TRACE verb to my web site, I recieve: HTTP/1.1 Error 501 - Not Implemented which based on KB247643 is an indication of TRACE verb being disabled on my site, a good sign for...more >>

Redirecting http:// to https:/
Posted by MayahLynn at 7/12/2005 5:23:04 AM
I have SSL configured and working on a Windows 2003 server with IIS 6.0. I can view my website with the https:/ but when you type my domain www.mydomain.com it gives me the HTTP Error 403.4 - Forbidden: SSL is required to view this resource. How do I get mywebsite to automaticly redirect to ...more >>


DevelopmentNow Blog