all groups > iis security > july 2005 > threads for july 15 - 21, 2005
Filter by week: 1 2 3 4 5
How to enable event logging IIS 5.1
Posted by Jeffrey Exconde at 7/21/2005 3:42:20 PM
Hi,
How do you enable event logging in IIS 5.1
Thanks
... more >>
IIS 5.1 : Default Web Site "Server Certificate"
Posted by John Grandy at 7/21/2005 1:49:17 PM
I am on Windows XP Pro SP2, IIS 5.1
In IIS.msc, on "Default Web Site", right-click "Properties", go to
"Directory Security" tab, click "View Certificate" button:
Issued To = "localhost"
Friendly Name = "SoloffWeb"
This properties exactly match the cert I just created using "Server
Cert... more >>
URLScan not blocking/logging anything (W2k3, IIS6)
Posted by Scott at 7/21/2005 12:41:42 PM
Hi,
I have installed URLScan on my W2k3 web server, and it appears to be
loaded correctly (green up-arrow in the ISAPI filters tab), but it is
not functioning at all. It is not blocking the extensions it should
block, nor is it generating a log file. Any ideas why this would
happen? I have... more >>
Writing to a Virtual Directory
Posted by GregP at 7/21/2005 5:48:41 AM
I have a web app that receives XML, parses it, runs it against a
database, then sends this data back as XML.
When the file is received, a corresponding text file that contains the
data being received is created in a virtual directory.
This configuration runs fine in IIS 5.1 on XP Pro. But ... more >>
WSUS and IIS Lockdown tool configuration
Posted by DanielM at 7/21/2005 5:46:03 AM
I have a SBS 2K and I am trying to install WSUS. When access the control panel
I get the following error "Server Error in '/WSUSAdmin' Application" some
suggest that the lockdown tool works. I install the lockdown tool but that
software doesn't allow me to configure it. It idicates it is resto... more >>
certificates and sub-webs of Default Web Site
Posted by John Grandy at 7/20/2005 7:42:35 PM
In IIS 5.1 and IIS 6.0 , do sub-webs of "Default Web Site" automatically
inherit a Server Certificate established for a "Default Web Site" ?
I see that my sub-webs all have the "View Certificate" button enabled , but
the "Server Certficate" button disabled.
I see that my "Default Web Site"... more >>
IIS6.0 prompting for logon
Posted by Kevin Wheeler at 7/20/2005 6:07:40 PM
How do I stop IIS6.0 from prompting for a username and password? enable
anonymous access is checked and integrated Windows authenication is also
selected.
Kevin
... more >>
Is this scenario supported?
Posted by me at 7/20/2005 1:00:01 PM
Have an ASP.Net web application which needs to:
1) access an SQL server database (not a local server)
2) restrict access to the web application to a set of users
We'd like to configure the web application to access the database using a
single, specific account and an Application Pool. Easy.... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
IIS and EFS
Posted by Ageen at 7/20/2005 10:46:07 AM
Hi,
We are planning to use either IIS 5.0 or 6.0 for some
internal use. All of our users must go through a
single sign on authentication first before they can
use any one of the available services. I was wondering
if we use EFS to encrypt the IIS root folder, when the
end users coming to our... more >>
401.1 - Integrated Security Error when using VB application
Posted by Tim at 7/20/2005 4:34:02 AM
Hi,
I have a windows 2003 server (no service packs) running on Microsoft Virtual
Server.
I have set up a simple asp page running under iis 6.0 with integrated
security.
I can access the asp page through IE running on a client laptop (XP SP1),
however a VB application on the same machi... more >>
IIS 6.0 Windows Integrated Authentication Problem - 401.2 Error
Posted by manjos at 7/19/2005 8:22:23 AM
Hi,
Problem Description:
The problem occurs when I create a new website in IIS 6.0, I disable
anonymous access and enable only Windows Integrated Authentication. I
place a simple html page in the directory and try to browse to it using
IE 6.0 SP1. I immediately receive an error (HTTP Error ... more >>
Authentication is not wanted.
Posted by Paul at 7/19/2005 12:00:00 AM
I have a web server (2003) IIS6
Whenever a different computer connects to the web site, they get a username
and password request, but "Enable anonymous access" is on for the web site.
If I remove the option "Integrated Windows authentication" then the page
immediately fails to load with "You a... more >>
PBL: TI Assembly.Net installation ERROR after Windows Server 2003 Service Pack 1 installation
Posted by Ruben at 7/19/2005 12:00:00 AM
Hi all,
We encountered some problems installaing assembli.net (.dll) no a server
with Windows server 2003 (SP1) + his 2004.
When we try to deploy the assembly whit "TI New object wizard", we recive an
error:
----------------------------------------------------------------------------
-----... more >>
Why is login requesting domain for some users?
Posted by Frank Rowe at 7/18/2005 4:44:56 PM
I have a public web with a few restricted sub-webs, which I authenticate
using basic (clear text) authentication. For most users when they try to
access a restricted sub-web, they're prompted for username & password. When
they supply these, they're in OK.
For a few users, their prompt includes u... more >>
IISADMPWD - IIS6
Posted by Eric at 7/18/2005 1:47:34 PM
In IIS6, MS says the IISADMPWD virtual directory needs to run in the same
virtual directory as the application that the user is trying to sign on to,
so they can change their password. I have quite a few applications that
users sign-on to and I really don't want to run them all in the same pool.... more >>
Sharepoint Site works with Basic not with Integrated
Posted by Alex at 7/18/2005 12:51:09 PM
We are currently working on a sharepoint site with Analysis services.
Whenever we try to autheticate using the internal FQDN of the server with
integrated authentication it works. However if we use inegrated with the
Internet DNS it fails and gives Kerberos errors. If I change it to Basic a... more >>
Basic auth without dialog - no database
Posted by bschoen NO[at]SPAM rogers.com at 7/18/2005 10:02:27 AM
Our site (IIS on W2K) security uses Basic Authentication with SSL. We
now have a request from our parent company to allow users authenticated
on their site to have access to protected areas of our site without
popping up the authentication dialog again.
Is there any way to do this without chan... more >>
Integrated Authenticatoin - Default to the main domain
Posted by Jonathan Palmer at 7/18/2005 8:39:06 AM
I have a Windows 2003/IIS 6.0 application running on a machine that is a
member of the domain but is not a domain controller.
If a user goes to this site and fills in their unqualified user name (i.e.
without a domain name), the authenticeation fails (as the IIS tries to
authenticate agains... more >>
Not authorized to view page IIS5
Posted by Dave T at 7/18/2005 7:27:01 AM
Hello,
I am running IIS5 and have restricted access to a folder that is on our web
site. I am trying to set this up so that when someone tries to view a page
that is in a folder they do not have access to they get a you are not
authorized to view this page...instead they are prompted for use... more >>
secure ftp
Posted by param NO[at]SPAM community.nospam at 7/16/2005 10:32:53 AM
Hi all,
Is it possible to setup secure FTP in IIS 6? Ideally using SSL? If so, how
can I do it? I dont see any options in the IIS control panel for the ftp
site.
TIA
... more >>
How secure is IIS 6?
Posted by James at 7/16/2005 4:12:01 AM
Hello there,
I am a newbie to IIS but I need to host a forum on my own server for various
reasons. I am wondering how secure is IIS, it will be on win Server 2003 and
behind a simple Netgear Router firewall, that is it.
Will I need to purchase a proper firewall or some extra software, or d... more >>
IIS authentification with a ASP Application on a SAMBA host
Posted by jtolksdo NO[at]SPAM hotmail.com at 7/15/2005 4:33:32 PM
Hi,
I'd like to upload files within a asp.NET web-application through
Microsoft IIS 6.0 to a SAMBA network share, which requires an
authentication. The SAMBA Server is not a member of a domain. The
Windows 2003 Server either not. Both are dedicated Server.
The Webser has two NIC. One is con... more >>
When I use ip address for the URL, it requires Windows Authenticat
Posted by Prem Mehrotra at 7/15/2005 11:01:03 AM
I am using IIS 5.0 on Windows 2000. I have set up a web site and it has been
working fine. To access web-site o uses a URL like:
https://pqms1.xyz.com
Some of users do not have DNS, so they are using ip address instead of
server name,
https://10.4.3.106
However when IP adrress is used, ... more >>
firewall suggestions?
Posted by Dave at 7/15/2005 12:00:00 AM
running win2kpro with iis for my personal web site. my good router with
hardware firewall is broke, so i went back to an older one that doesn't have
a firewall. so i put on an old zonealarm (2.6 i think) and everything was
fine with iis. but i was having trouble accessing the drive shares f... more >>
|