all groups > iis security > november 2006 > threads for november 15 - 21, 2006
Filter by week: 1 2 3 4 5
How to create a web application on SBS2003 server ?
Posted by Tony Girgenti at 11/20/2006 11:29:12 AM
Hello.
I'm trying to do create a VB ASP.NET web application on a SBS2003 server
with IIS6.0, .NET Framework 1.1.4322, ASP.NET 1.1.4322 using Visual
Studio.NET 2003 on an XP Pro, SP2 machine.
When i attempt this, i get this "Web Access Failed" message:
The default web access mode for this pr... more >>
"Failed to access IIS metabase" after installing Windows XP Pro
Posted by Wayne Erfling at 11/18/2006 10:14:15 AM
When I installed Visual Studio 2005 on Windows 2000 Pro, my asp.net 2.0 =
sites on http://localhost worked fine.
Then I upgraded the OS to Windows XP Pro and now all the sites report =
"Failed to access IIS metabase", all the time ("file" websites work =
fine).
I have already been working t... more >>
Wrong cert for ssl site shows up
Posted by CGTech at 11/17/2006 7:43:01 AM
Configuration as follows:
Running ISA2004 as firewall/proxy/publishing server, one exchange server,
one web server.
Exchange server has OWA setup with SSL, therefore the ISA has a listener for
port 443. I setup a second listener useing SSL port 444, with a secure web
site rule pointing to... more >>
Constrained Delegation Problem: SQL partially delegated
Posted by JimLad at 11/17/2006 7:03:03 AM
Hi,
I have set up delegation and IT WORKS to link through to a back end SQL
server.
However for security reasons I want to limit the services that can be
delegated to to MSSQLSvc on the db server. An SPN has been set up for
the SQL server account on port 1433.
When I swap to constrained ... more >>
Non-default website is asking for username and password: why?
Posted by JimLad at 11/17/2006 4:09:01 AM
Hi,
I have a website using IWA (no anonymous logins) and delegation. I have
IWA enabled on IE6 and the site is in the Trusted Zone.
The same setup on the default website goes straight in without asking
for credentials as I would expect. Why is the non-default website
asking for credentials ... more >>
Impersonation and Delegation with ASP ASP.NET 1.1 IIS6 SQLXML
Posted by JimLad at 11/17/2006 2:27:42 AM
Hi,
I'm working on Server 2003 servers with XP client. I'm trying to set up
a fairly typical scenario of client - webserver - db server with
Impersonation and delegation. Using default website which hosts ASP,
ASP.NET 1.1 and SQLXML Web Release 1 Virtual Directory. There is
another website (s... more >>
Security Alert: The Name of the Security Certificate Is Invalid or Does Not Match the Name of the Site
Posted by Tas at 11/16/2006 3:01:39 PM
I just purchased and setup an SSL certificate for an MS OWA server.
The certificate works great for me from multiple computers I have
tested it on. I can go to the secure page with no errors or pop-ups at
all.
But, a client who is trying to access OWA gets this error: Security
Alert: The Nam... more >>
IIS Configuration
Posted by Gladyston at 11/16/2006 9:45:02 AM
Hello!
I have an windows 2003 Standart with all updates and this only run IIS. I
have many sites in IIS, but in some, I need set IUSR permission as write.
This way i was hacked. What i can do different?
Thanks... more >>
Don't see what you're looking for? Search DevelopmentNow.com.
Security
Posted by Mr.Wright at 11/16/2006 6:33:02 AM
I have a website which I am hosting on a win2K3 SP2 server. Let's say
www.mypage.com I would like to make www.mypage.com/admin only accessible
from within a certain IP range.
Is this possible? Would this setting be made on the server or could it be
done through our PIX?... more >>
Virtual Directory to a remote UNC not working properly
Posted by dhoops at 11/15/2006 2:03:01 PM
Setup:
IIS 6.0, Windows 2003 sp1 server.
Web server and UNC server are on the same domain.
Using 'Integrated Windows and Digest Authentication on both the Intranet
site and the virtual directory on the web server.
Problem:
When trying to access a file on the virtual directory from outside t... more >>
Logging of ciphers / ssl versions used by clients?
Posted by Chu at 11/15/2006 8:33:28 AM
Hello,
We are wanting to remove SSLV2 and enforce "stronger" encryption
ciphers in our IIS 5.x and 6.x installations. However, the business
units are concerned that doing so may preclude some users from
accessing our website. I know all current browsers support SSLV3 and
strong ciphers, but... more >>
Impersonation and Delegation with ASP.NET 2.0 on 2 Servers
Posted by Patrick at 11/15/2006 12:00:00 AM
Hello
I have the following scenario
- SQL 2005 server (serversql)
- Windows 2003 with IIS (serveriis)
- Windows 2003 ADS (serverads)
I want to connect to an intranet application using NTML with impersonation
and delegation. so for this I made the following change in web.config
<identity ... more >>
|