Groups | Blog | Home


Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > iis security > july 2005 > threads for july 15 - 21, 2005

Filter by week: 1 2 3 4 5

How to enable event logging IIS 5.1
Posted by Jeffrey Exconde at 7/21/2005 3:42:20 PM
Hi, How do you enable event logging in IIS 5.1 Thanks ...more >>


IIS 5.1 : Default Web Site "Server Certificate"
Posted by John Grandy at 7/21/2005 1:49:17 PM
I am on Windows XP Pro SP2, IIS 5.1 In IIS.msc, on "Default Web Site", right-click "Properties", go to "Directory Security" tab, click "View Certificate" button: Issued To = "localhost" Friendly Name = "SoloffWeb" This properties exactly match the cert I just created using "Server Cert...more >>

URLScan not blocking/logging anything (W2k3, IIS6)
Posted by Scott at 7/21/2005 12:41:42 PM
Hi, I have installed URLScan on my W2k3 web server, and it appears to be loaded correctly (green up-arrow in the ISAPI filters tab), but it is not functioning at all. It is not blocking the extensions it should block, nor is it generating a log file. Any ideas why this would happen? I have...more >>

Writing to a Virtual Directory
Posted by GregP at 7/21/2005 5:48:41 AM
I have a web app that receives XML, parses it, runs it against a database, then sends this data back as XML. When the file is received, a corresponding text file that contains the data being received is created in a virtual directory. This configuration runs fine in IIS 5.1 on XP Pro. But ...more >>

WSUS and IIS Lockdown tool configuration
Posted by DanielM at 7/21/2005 5:46:03 AM
I have a SBS 2K and I am trying to install WSUS. When access the control panel I get the following error "Server Error in '/WSUSAdmin' Application" some suggest that the lockdown tool works. I install the lockdown tool but that software doesn't allow me to configure it. It idicates it is resto...more >>

certificates and sub-webs of Default Web Site
Posted by John Grandy at 7/20/2005 7:42:35 PM
In IIS 5.1 and IIS 6.0 , do sub-webs of "Default Web Site" automatically inherit a Server Certificate established for a "Default Web Site" ? I see that my sub-webs all have the "View Certificate" button enabled , but the "Server Certficate" button disabled. I see that my "Default Web Site"...more >>

IIS6.0 prompting for logon
Posted by Kevin Wheeler at 7/20/2005 6:07:40 PM
How do I stop IIS6.0 from prompting for a username and password? enable anonymous access is checked and integrated Windows authenication is also selected. Kevin ...more >>

Is this scenario supported?
Posted by me at 7/20/2005 1:00:01 PM
Have an ASP.Net web application which needs to: 1) access an SQL server database (not a local server) 2) restrict access to the web application to a set of users We'd like to configure the web application to access the database using a single, specific account and an Application Pool. Easy....more >>



IIS and EFS
Posted by Ageen at 7/20/2005 10:46:07 AM
Hi, We are planning to use either IIS 5.0 or 6.0 for some internal use. All of our users must go through a single sign on authentication first before they can use any one of the available services. I was wondering if we use EFS to encrypt the IIS root folder, when the end users coming to our...more >>

401.1 - Integrated Security Error when using VB application
Posted by Tim at 7/20/2005 4:34:02 AM
Hi, I have a windows 2003 server (no service packs) running on Microsoft Virtual Server. I have set up a simple asp page running under iis 6.0 with integrated security. I can access the asp page through IE running on a client laptop (XP SP1), however a VB application on the same machi...more >>

IIS 6.0 Windows Integrated Authentication Problem - 401.2 Error
Posted by manjos at 7/19/2005 8:22:23 AM
Hi, Problem Description: The problem occurs when I create a new website in IIS 6.0, I disable anonymous access and enable only Windows Integrated Authentication. I place a simple html page in the directory and try to browse to it using IE 6.0 SP1. I immediately receive an error (HTTP Error ...more >>

Authentication is not wanted.
Posted by Paul at 7/19/2005 12:00:00 AM
I have a web server (2003) IIS6 Whenever a different computer connects to the web site, they get a username and password request, but "Enable anonymous access" is on for the web site. If I remove the option "Integrated Windows authentication" then the page immediately fails to load with "You a...more >>

PBL: TI Assembly.Net installation ERROR after Windows Server 2003 Service Pack 1 installation
Posted by Ruben at 7/19/2005 12:00:00 AM
Hi all, We encountered some problems installaing assembli.net (.dll) no a server with Windows server 2003 (SP1) + his 2004. When we try to deploy the assembly whit "TI New object wizard", we recive an error: ---------------------------------------------------------------------------- -----...more >>

Why is login requesting domain for some users?
Posted by Frank Rowe at 7/18/2005 4:44:56 PM
I have a public web with a few restricted sub-webs, which I authenticate using basic (clear text) authentication. For most users when they try to access a restricted sub-web, they're prompted for username & password. When they supply these, they're in OK. For a few users, their prompt includes u...more >>

IISADMPWD - IIS6
Posted by Eric at 7/18/2005 1:47:34 PM
In IIS6, MS says the IISADMPWD virtual directory needs to run in the same virtual directory as the application that the user is trying to sign on to, so they can change their password. I have quite a few applications that users sign-on to and I really don't want to run them all in the same pool....more >>

Sharepoint Site works with Basic not with Integrated
Posted by Alex at 7/18/2005 12:51:09 PM
We are currently working on a sharepoint site with Analysis services. Whenever we try to autheticate using the internal FQDN of the server with integrated authentication it works. However if we use inegrated with the Internet DNS it fails and gives Kerberos errors. If I change it to Basic a...more >>

Basic auth without dialog - no database
Posted by bschoen NO[at]SPAM rogers.com at 7/18/2005 10:02:27 AM
Our site (IIS on W2K) security uses Basic Authentication with SSL. We now have a request from our parent company to allow users authenticated on their site to have access to protected areas of our site without popping up the authentication dialog again. Is there any way to do this without chan...more >>

Integrated Authenticatoin - Default to the main domain
Posted by Jonathan Palmer at 7/18/2005 8:39:06 AM
I have a Windows 2003/IIS 6.0 application running on a machine that is a member of the domain but is not a domain controller. If a user goes to this site and fills in their unqualified user name (i.e. without a domain name), the authenticeation fails (as the IIS tries to authenticate agains...more >>

Not authorized to view page IIS5
Posted by Dave T at 7/18/2005 7:27:01 AM
Hello, I am running IIS5 and have restricted access to a folder that is on our web site. I am trying to set this up so that when someone tries to view a page that is in a folder they do not have access to they get a you are not authorized to view this page...instead they are prompted for use...more >>

secure ftp
Posted by param NO[at]SPAM community.nospam at 7/16/2005 10:32:53 AM
Hi all, Is it possible to setup secure FTP in IIS 6? Ideally using SSL? If so, how can I do it? I dont see any options in the IIS control panel for the ftp site. TIA ...more >>

How secure is IIS 6?
Posted by James at 7/16/2005 4:12:01 AM
Hello there, I am a newbie to IIS but I need to host a forum on my own server for various reasons. I am wondering how secure is IIS, it will be on win Server 2003 and behind a simple Netgear Router firewall, that is it. Will I need to purchase a proper firewall or some extra software, or d...more >>

IIS authentification with a ASP Application on a SAMBA host
Posted by jtolksdo NO[at]SPAM hotmail.com at 7/15/2005 4:33:32 PM
Hi, I'd like to upload files within a asp.NET web-application through Microsoft IIS 6.0 to a SAMBA network share, which requires an authentication. The SAMBA Server is not a member of a domain. The Windows 2003 Server either not. Both are dedicated Server. The Webser has two NIC. One is con...more >>

When I use ip address for the URL, it requires Windows Authenticat
Posted by Prem Mehrotra at 7/15/2005 11:01:03 AM
I am using IIS 5.0 on Windows 2000. I have set up a web site and it has been working fine. To access web-site o uses a URL like: https://pqms1.xyz.com Some of users do not have DNS, so they are using ip address instead of server name, https://10.4.3.106 However when IP adrress is used, ...more >>

firewall suggestions?
Posted by Dave at 7/15/2005 12:00:00 AM
running win2kpro with iis for my personal web site. my good router with hardware firewall is broke, so i went back to an older one that doesn't have a firewall. so i put on an old zonealarm (2.6 i think) and everything was fine with iis. but i was having trouble accessing the drive shares f...more >>


DevelopmentNow Blog