all groups > iis security > august 2005 > threads for august 15 - 21, 2005
Filter by week: 1 2 3 4 5
Access deny from Server.CreateObject("COM.ComClsGetSysInfo")
Posted by Dickey at 8/21/2005 7:21:01 PM
Help please!!
I have an asp page that generates an error with the statement:
Set Com1= Server.CreateObject("COM.ComClsGetSysInfo")
I keep getting the error:
'ASP 0178 : 80070005' Server.CreateObject Access Error
The call to Server.CreateObject failed while checking permissions. Access... more >>
ssl one IP two Ports
Posted by LionPaw at 8/21/2005 2:21:01 PM
I tried self SSL (with /P:5005) with two different web sites on the same IP.
first was 443, worked fine. then 5050, that worked fine, but broke the 443
site. reissues the 443 and then 443 worked but 5050 broke.
the logs complain about unable to bind already taken.
restared IIS betwteen.... more >>
Limited rights in IIS6?
Posted by Glen Scott at 8/21/2005 10:59:09 AM
IIS6 ASP3 web application for configuring an ISA Server is
configured to use Windows account X when accessed anonymously. ASP
VBScript gets error 80070002 when calling the Connect function in the
ISA Server Management API.
Same script put into a VBS file succeeds when the user logge... more >>
ASPX form Uploads a file even without IIS Write permission
Posted by FB at 8/19/2005 5:31:19 PM
A customer have a IIS 6 web server and even with IIS Write property DISABLED,
an ASPX form can upload files to the server.
The authentication is Anon (via IUSR_ user) and the IUSR_User have RWXD
rights on the folder where the upload is stored.
In the properties of the IIS folder where upl... more >>
KB 834489 - workarround
Posted by Ran Davidovitz at 8/19/2005 8:34:30 AM
Hi.
I have a customer that until today passed his username / password using the
URL (using basic authentication).
After reading KB 834489 I see that this behavior is not supported any more.
I dont understand what is the workarround described in KB 834489.
I want to know if there is anoth... more >>
"disable parent paths" apparently not taking effect on IIS6
Posted by Jed at 8/18/2005 2:07:03 PM
I'm porting several websites from IIS5 to IIS6. On IIS5, the sites all ran
with parent paths allowed. To improve security, I plan on disabling parent
paths on the IIS6 server. To help set up the new machine, I first *enabled*
parent paths on IIS 6 by checking the "enable parent paths" box f... more >>
ActiveX over SSL
Posted by Andrew Sigota at 8/18/2005 1:17:01 PM
Does anyone know why a signed (and safe for initializing and scripting)
ActiveX control wouldn't download (not even prompt to download) from an SSL
enabled website? It prompts if website is accessed through http but nothing
happens if going through https. The site is among Trusted sites. ... more >>
IIS 5.1 password retype
Posted by Nano at 8/18/2005 10:17:04 AM
Hi,
I am using an IIS 5.1 from Windows XP Pro. For a subdirectory a have only
granted user "test" access (via Windows Explorer, to allow Windows
Verification).
Most users can just type the URL, fill in "test" and "password" in the
dialogbox and browse the site. But others have to retype ... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
HTTP 500: Internal Server Error
Posted by Jiju Joseph at 8/18/2005 6:41:05 AM
Hi,
I have deployed a website on by Windows 2000 Adv Server (IIS 5.0),
Eveything is working fine except when I try to access some files in the
some subfolders with in the site, it throws "Page Cannot be Found" Error..
Any idea what could be causing this? and what is the solution for th... more >>
404.dll functionality in IIS6?
Posted by Sean S - Perth, WA at 8/18/2005 1:00:02 AM
Hi all,
I have an IIS6 site that will run ASP.NET that has a folder in which I need
to explicitly block all possibility of code running or being downloaded
(unsupervised novice web authors).
In IIS5 this was easy using 404.dll. I'm aware of HttpForbiddenHandler but
I'm not happy with the... more >>
Use of Client Certificates
Posted by Raghu at 8/17/2005 11:22:55 AM
Requing client certificates on the web server allows any client with
certificate to make a call to web server. How can I configure IIS6 to accept
only a handful of client certificates and silently drop others?
Thanks.
Raghu/..
... more >>
OMA/OWA password masking
Posted by DrED_Gasket at 8/17/2005 2:06:02 AM
I have noticed that when using a smart phone to connect to Exchange via
Outlook Mobile Access OR Outlook Web Access via HTTPS, that when I enter the
password, it takes about 5 seconds before the entry becomes masked, "********"
Has anyone got any suggestions on what might be causing this and... more >>
IIS Safari
Posted by ReifMU at 8/16/2005 7:46:52 AM
Is it possible to use integrated windows authentication with the Safari
browser? I have been able to get basic authentication to work, but the
entire point of the site i am working on is to not have to type in any
password or username at all. All authentication should be done behind
the scenes u... more >>
iisadmpwd
Posted by stingray at 8/16/2005 12:00:00 AM
Hi i'm trying to let users change password from webpage, but it doesn't
work, i have followed the instructions from kb microsoft, but still not
working, it says page not found
can't find detailed instructions on how to let it work,someone have some
tips?
thanks
... more >>
SSL pages: determining which ones
Posted by Doug at 8/15/2005 4:40:32 PM
Hello! Setting up a new web server to replace the old one, bought a new SSL
certificate, and I was wondering if there's a way on the older IIS server to
determine which pages are setup with encryption.
We're talking about a site with thousands of pages, so I'm hoping there's
some way runnin... more >>
IIS SSL Site Page Not Found - have tried everything
Posted by Daniel J. Reynolds at 8/15/2005 4:32:56 PM
I have a default web site on IIS 5 set up with a SSL Certificate
issued by our in-house certificate authority. When "Require SSL
certificate" is not checked the default web page "default.html" is
returned via http://rs.domain.com If "require SSL certificate" is
checked, a page "SSL required" is... more >>
|