Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008


all groups > iis security > january 2006 > threads for january 15 - 21, 2006

Filter by week: 1 2 3 4 5

How to reinstall old SSL cert on a IIS installation?
Posted by nospam NO[at]SPAM nospam.sss at 1/21/2006 4:51:50 PM
I had to restore an image to my boot drive. The restore has an IIS image before it had the IIS cert. Is there any way to install the ssl certificate I have? I tried to create a new pending request but I couldn't use my existing cert. I don't have a backup of the private and public keys. J...more >>

Use Secure Sockets Layer for a single web site
Posted by NuBee at 1/21/2006 12:36:02 PM
(1) How do I install (or require SSL) SSL on a web site? (2) Do I have to use a certificate? If yes, can I create my own? -- NuBee...more >>

IIS Security
Posted by RobG at 1/20/2006 12:16:03 PM
I am a local administrator on a Windows Server 2003 system (SP1) and I cannot successfully logon to the Default Web Site. Permissions and Security for WWWRoot lists Administrators as Full Control. What am I missing?...more >>

Wildcard SSL cert error
Posted by news.microsoft.com at 1/20/2006 9:07:24 AM
Hi I have a problem with a wildcard SSL and I'm sure someone else must have come across this scenario and solved it. We have a wildcard SSL *.domain.com I have installed the SSL and if the website is called whatever.domain.com the client receives no errors and the SSL is established. ...more >>

IIS protocol question
Posted by Georg Bauer at 1/20/2006 7:55:02 AM
Hi there, I use IIS6 on Server2003Standard with isapi-redirector to Tomcat 4.1.31 as servlet-engine. Everything works fine, ... but: every time, I call my servlet (even local or from a client) there are three entries in the IIS-Log, the first two of them with an error 401 Where are this erro...more >>

How do I reset ACL of C:\Inetpub\wwwroot
Posted by Gaetan at 1/20/2006 4:20:42 AM
For a long time, I experienced random problems with Microsoft IE Web Controls. Most of the time, I managed to get the Tree View and Tab Strip to work again after they mysteriously stopped working. Unfortunately, IE Web Controls seems to have stopped working for good on my IIS 6.0 server. I tr...more >>

I need less IIS security to fwrite via PHP
Posted by ctrygstad at 1/19/2006 5:11:06 PM
I get denied access, where can I allow PHP to write files? I get error messages when I try to fwrite, and I checked my php.ini file, there is a specific line to grant access to fwrite and fopen, does anyone know anything about this? -- ctrygstad --------------------------------------...more >>

Default Site & Application Pool / ASP.NET security problems
Posted by Jonathon J. Howey at 1/19/2006 1:47:05 PM
Hi, The problem i'm seeing seems to exist only with the Default Web Site and Default App Pool. Earlier today, we installed MS Project Server 2003, and had Sharepoint extend the default Web Site. Since then our two ASPNET applications running, plus WSUS, have stopped working; throwing a .N...more >>



authentication problem IIS6 on Win2003
Posted by Georg Bauer at 1/19/2006 1:21:02 AM
Hello! I really hope, you can help me: I have installed an ASP-application with exactly the same IIS-definitions on Win-XP and it works fine! I try to install the same ASP-application on Windows Server 2003 Standard / IIS6 I have created 3 separate virtual directorys: for the *.asp, for ...more >>

CDOSYS - security
Posted by Rusty at 1/18/2006 1:26:02 PM
I am hosting a few websites on a win2003 server (fully patched) / IIS6. Each site has forms that when filled out use CDOSYS to email info to users inside the company. Everything works great. Are there any CDOSYS vulnerabilities that a spammer could use to take advantage of those forms to ...more >>

Remote access outside local network
Posted by d3scr1pt0r NO[at]SPAM gmail.com at 1/18/2006 5:44:43 AM
Hi, I am trying to use the remote workspace , remote access website of our network, but it seems as it can be accesed only from inside our local network, how can i make it work from outside? Our outlook webmail and OMA work fine from outside. Also a secondary website i have running on a diff...more >>

FP Site Access - User/Pass required ?
Posted by Bob at 1/17/2006 11:07:36 PM
I have a newly built Win2003 server w/IIS6. The server is standalone and there is no AD. Users log onto client machines with credentials that match user/pass accounts on the Win2003 machine. Everything works fine, clients get access to shared win2003 resources as expected. However, when I sta...more >>

Client certificate mapping question
Posted by Bob at 1/17/2006 8:09:30 PM
I have a web server running Windows 2003 with SP1. I need to use a client certificate to control the access to a path. Under Properties -> Directory Security -> Security Communications (Edit) of the folder, I checked Require secure channel and Require client certificates. Then I added a mappin...more >>

keep getting massage -encrypted connection error code 8075
Posted by boxer184 at 1/17/2006 3:26:01 PM
would someone please tell my how to set my encryption higher...more >>

installing virus scanning
Posted by Bad Beagle at 1/17/2006 11:46:05 AM
Is there any ill effects of installing virus scanning on an IIS 6.0 website - is there any directories that should be excluded? ...more >>

Using Root of Drive for Home Directory of Virtual Directory
Posted by hotsdogs at 1/17/2006 9:27:02 AM
Does anyone know of a security issue of using the root of a drive, for instance d:\, as the home directory of a virtual directory in IIS? I am proposing doing this for purposes of Remoting to save a lot of effort in configuring remoting objects. My company already has an established directory ...more >>

Cookies not working on a specific computer
Posted by Padraic at 1/17/2006 3:55:04 AM
I am developing on two seperate laptops and I am posting my code to a hosting provider. My code works perfectly on laptop1 and on the hosting provider. The same code does not work on laptop2. On this laptop2 I am unable to create cookies, sessions or a ticket. I know cookies work on laptop2 ...more >>

IIS on a domain controller
Posted by Khizer at 1/17/2006 2:03:03 AM
Hi, We have a w2003 domain controller which also has IIS ans WSUS on it. Are there any security implications with this setup or do you think it's better if I install IIS and WSUS on a seperate server. Thanks Khizer ...more >>

Can not get Security tab in folder properties to set webserver use
Posted by Steve at 1/16/2006 7:50:02 PM
I am writing an ASP page to edit a database. Ive done it many times in the past successfully and I am using copies of that successful code, so i wont worry about the db code or setup its fine. i can read no problem from the db's, but if i try to edit one i get... Microsoft OLE DB Provider for...more >>

Encryption of Credit Card files
Posted by The Poster at 1/16/2006 12:47:46 PM
G/Day Forum, We are working on complying with the Visa/MAsterCard Payment Card Industry Data Security Standard (PCI DSS). As part of this we need to imply the following controls on the storage of credit card data: to encrypt data at a folder level - that is all of the containing folders and...more >>

Kerberos Error 4
Posted by Michael Morisoli at 1/16/2006 6:24:24 AM
I am still trying to get all my spn's configured properly and seem to be missing something. The details of the event log are; "The kerberos client received a KRB_AP_ERR_MODIFIED error from the server host/vieon-sql2k5-01.vieon.net. The target name used was HTTP/VIEON-Sql2k5-01.vieon.net. ...more >>

Hardware Load Balanced IIS SSL Web Farm
Posted by phil.stollery NO[at]SPAM gmail.com at 1/16/2006 3:39:46 AM
I've read through all the SSL and Web Farm posts on microsoft.public.inetserver.iis.security and non of them seem to have the answer for me. Before I start I have read the following articles: http://support.microsoft.com/?id=313299 (how to setup SSL on webfarms) http://support.microsoft.com/?...more >>

How can I remove the "NTAuthenticationProviders" node in IIS 6
Posted by Michael Morisoli at 1/15/2006 3:00:06 PM
I ran the command cscript adsutil.vbs set w3svc/NTAuthenticationProviders "Negotiate,NTLM" which is causing some services to not use Kerberos which is causing some other problems. I would like to find out how to remove this node as if I never ran the command. Thanks, Mike ...more >>


DevelopmentNow Blog