Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > iis security > august 2005 > threads for august 15 - 21, 2005

Filter by week: 1 2 3 4 5

Access deny from Server.CreateObject("COM.ComClsGetSysInfo")
Posted by Dickey at 8/21/2005 7:21:01 PM
Help please!! I have an asp page that generates an error with the statement: Set Com1= Server.CreateObject("COM.ComClsGetSysInfo") I keep getting the error: 'ASP 0178 : 80070005' Server.CreateObject Access Error The call to Server.CreateObject failed while checking permissions. Access...more >>


ssl one IP two Ports
Posted by LionPaw at 8/21/2005 2:21:01 PM
I tried self SSL (with /P:5005) with two different web sites on the same IP. first was 443, worked fine. then 5050, that worked fine, but broke the 443 site. reissues the 443 and then 443 worked but 5050 broke. the logs complain about unable to bind already taken. restared IIS betwteen....more >>

Limited rights in IIS6?
Posted by Glen Scott at 8/21/2005 10:59:09 AM
IIS6 ASP3 web application for configuring an ISA Server is configured to use Windows account X when accessed anonymously. ASP VBScript gets error 80070002 when calling the Connect function in the ISA Server Management API. Same script put into a VBS file succeeds when the user logge...more >>

ASPX form Uploads a file even without IIS Write permission
Posted by FB at 8/19/2005 5:31:19 PM
A customer have a IIS 6 web server and even with IIS Write property DISABLED, an ASPX form can upload files to the server. The authentication is Anon (via IUSR_ user) and the IUSR_User have RWXD rights on the folder where the upload is stored. In the properties of the IIS folder where upl...more >>

KB 834489 - workarround
Posted by Ran Davidovitz at 8/19/2005 8:34:30 AM
Hi. I have a customer that until today passed his username / password using the URL (using basic authentication). After reading KB 834489 I see that this behavior is not supported any more. I dont understand what is the workarround described in KB 834489. I want to know if there is anoth...more >>

"disable parent paths" apparently not taking effect on IIS6
Posted by Jed at 8/18/2005 2:07:03 PM
I'm porting several websites from IIS5 to IIS6. On IIS5, the sites all ran with parent paths allowed. To improve security, I plan on disabling parent paths on the IIS6 server. To help set up the new machine, I first *enabled* parent paths on IIS 6 by checking the "enable parent paths" box f...more >>

ActiveX over SSL
Posted by Andrew Sigota at 8/18/2005 1:17:01 PM
Does anyone know why a signed (and safe for initializing and scripting) ActiveX control wouldn't download (not even prompt to download) from an SSL enabled website? It prompts if website is accessed through http but nothing happens if going through https. The site is among Trusted sites. ...more >>

IIS 5.1 password retype
Posted by Nano at 8/18/2005 10:17:04 AM
Hi, I am using an IIS 5.1 from Windows XP Pro. For a subdirectory a have only granted user "test" access (via Windows Explorer, to allow Windows Verification). Most users can just type the URL, fill in "test" and "password" in the dialogbox and browse the site. But others have to retype ...more >>



HTTP 500: Internal Server Error
Posted by Jiju Joseph at 8/18/2005 6:41:05 AM
Hi, I have deployed a website on by Windows 2000 Adv Server (IIS 5.0), Eveything is working fine except when I try to access some files in the some subfolders with in the site, it throws "Page Cannot be Found" Error.. Any idea what could be causing this? and what is the solution for th...more >>

404.dll functionality in IIS6?
Posted by Sean S - Perth, WA at 8/18/2005 1:00:02 AM
Hi all, I have an IIS6 site that will run ASP.NET that has a folder in which I need to explicitly block all possibility of code running or being downloaded (unsupervised novice web authors). In IIS5 this was easy using 404.dll. I'm aware of HttpForbiddenHandler but I'm not happy with the...more >>

Use of Client Certificates
Posted by Raghu at 8/17/2005 11:22:55 AM
Requing client certificates on the web server allows any client with certificate to make a call to web server. How can I configure IIS6 to accept only a handful of client certificates and silently drop others? Thanks. Raghu/.. ...more >>

OMA/OWA password masking
Posted by DrED_Gasket at 8/17/2005 2:06:02 AM
I have noticed that when using a smart phone to connect to Exchange via Outlook Mobile Access OR Outlook Web Access via HTTPS, that when I enter the password, it takes about 5 seconds before the entry becomes masked, "********" Has anyone got any suggestions on what might be causing this and...more >>

IIS Safari
Posted by ReifMU at 8/16/2005 7:46:52 AM
Is it possible to use integrated windows authentication with the Safari browser? I have been able to get basic authentication to work, but the entire point of the site i am working on is to not have to type in any password or username at all. All authentication should be done behind the scenes u...more >>

iisadmpwd
Posted by stingray at 8/16/2005 12:00:00 AM
Hi i'm trying to let users change password from webpage, but it doesn't work, i have followed the instructions from kb microsoft, but still not working, it says page not found can't find detailed instructions on how to let it work,someone have some tips? thanks ...more >>

SSL pages: determining which ones
Posted by Doug at 8/15/2005 4:40:32 PM
Hello! Setting up a new web server to replace the old one, bought a new SSL certificate, and I was wondering if there's a way on the older IIS server to determine which pages are setup with encryption. We're talking about a site with thousands of pages, so I'm hoping there's some way runnin...more >>

IIS SSL Site Page Not Found - have tried everything
Posted by Daniel J. Reynolds at 8/15/2005 4:32:56 PM
I have a default web site on IIS 5 set up with a SSL Certificate issued by our in-house certificate authority. When "Require SSL certificate" is not checked the default web page "default.html" is returned via http://rs.domain.com If "require SSL certificate" is checked, a page "SSL required" is...more >>


DevelopmentNow Blog