Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
all groups > iis security > february 2006 > threads for february 15 - 21, 2006

Filter by week: 1 2 3 4

Tutorial to set up IIS 6.0 on win2003 server
Posted by Surre at 2/21/2006 9:47:59 PM
I need a tutorial that shows me step-by-step how to set up my IIS so that it will be safe. I mean something like this http://www.windowsecurity.com/articles/Installing_Securing_IIS_Servers_Part1.html but for win2003. Since I am not an expert I fear that my server will be in danger without a...more >>


SSL question
Posted by tolgay at 2/21/2006 4:14:32 PM
Hi, I would like to implement in an IIS more than one SSL certificates, for example one domain name is www.test.com and the other one is www.test2.com and both of them in to a server and there is only one IP address. Need I use more than one ip address or more ? if could we use more than one ssl...more >>

NTLM and Kerberos
Posted by Joe at 2/20/2006 6:48:42 PM
I have a website using Windows Authentication and Delegation to access a backend SQL Server. Everything works when I am on the LAN. When I try to access the website from home I get the Login failed for User NULL... I am using the same name to access when I am on the LAN as when I am at ho...more >>

401.2 instead of 404 ?
Posted by Patrice at 2/20/2006 11:04:27 AM
In IIS6 I defined a custom error page. If I ask for a non existing page in an authenticated folder, it raises a 401.2 error instead of a 404 error. If I aski for a non xexisting page in an anonymous folder, the error page is correcly displayed. What could it be ? -- Patrice ...more >>

IIS_WPG and NETWORK SERVICE
Posted by Larry at 2/20/2006 7:40:27 AM
I have an ASP.NET site hosted on an SBS 2003 server. The server is a day old and no changes have been made to IIS with respect to user rights, etc. I have configured IIS_WPG to have the rights necessary to access what needs to be accessed on my site folder. I have set this up many times befor...more >>

SSL Certificate for IIS 6.0 after Domain change
Posted by Steven Hughes at 2/20/2006 7:25:27 AM
I have an IIS 6.0 server that was configured with an SSL certificate. That server was moved into a different domain and I am now having trouble applying a new SSL certificate to this IIS server. The web server cannot seem to talk directly to the certificate server in the new domain. I g...more >>

How can I run some web sites by using a single IP address and port
Posted by hhubbo at 2/20/2006 3:20:28 AM
I have a server2003 with IIS6.0 Thanks Bo ...more >>

Windows 2003: Remote Desktop Web with SSL problem
Posted by Lito Kusnadi at 2/18/2006 6:09:27 AM
Hi, I tried to enable SSL in IIS 6.0 and secure the tsweb connection with it. I create a enterprise CA, make a cert request, approve the request, and install the cert in the "Default Website" node under IIS Management. The default "https://localhost" works fine. But for some reason, the "...more >>



SP2 Security
Posted by Rob at 2/18/2006 5:29:28 AM
This is really driving me nuts. I have a local website on my PC that I use to run certain bits of software for my company. For example, a tutorial MPG file: Pre-SP2 (IE 6 and FF): Open http://localhost/ Click on file I want, and it runs. File shown as 'file:///D:/Work/Help.mpg'. Post-SP2...more >>

Free security tools
Posted by Troubled User at 2/17/2006 4:55:00 PM
Im normally from a unix environment, but have to do some security testing on an all windows network. Can anyone recommend any free tools for security testing? I can hapily take nessus and nmap with me, but it would be nice to have tools that are specific to windows services. ...more >>

SSL x site NOT in Port 80
Posted by max at 2/17/2006 3:56:48 PM
Hello there, How can I install an SSL service for a Web Site on port 81? That is, I have two sites on my server, so same IP but port 80 and 81. I want a subdir of site in 81 under https. Everything works if the the site under https is on port 80 (as often happen) but this time I have to...more >>

WEB Services don't respond
Posted by Miha at 2/17/2006 12:41:21 PM
From time to time we don't get any response from IIS on our 'stand alone' Win2003 Web Server, which is running WEB services. It's strange because there are no errors or other problems, web services just don't respond, so the only way to solve this is to reset IIS (iis reset). After that all is...more >>

Perl File
Posted by Kory at 2/17/2006 11:53:34 AM
Hello! I have a website running on IIS 6.0. The website points to some perl files for submissions. The perl files are located in cgi-bin directory. Here is the problem. When I click on request button, the browser tells me file not found. I enable directory browsing and when I open the ...more >>

Keep having to reset security for .NET
Posted by sysadmin guy at 2/17/2006 10:51:28 AM
I have to reset the security permissions for the C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322 folder on one of my web servers frequently. The machine\aspnet accounts keeps disappearing from the security permission. I’ve even rerun aspnet_regiis a few times but nothing seems to stick. The e...more >>

Locking down IIS on Windows 2003 Domain Controller
Posted by Desparate Dan at 2/17/2006 2:34:17 AM
Hi Gurus Can anyone advise on the steps needed to safely lock down IIS on a Windows 2003 donain controller. I know IIS lockdown is not needed on Windows 2003 IIS and I know I need to still run URLScan 2.5 but I was wondering if there are any other best practices that I should carry out. ...more >>

Getting rid of annoying users!
Posted by rob_illing NO[at]SPAM hotmail.com at 2/17/2006 2:22:34 AM
I've got a problem! My web-game (http://battles.interstellar-war.com) is being plagued by a particularly annoying user. He creates multiple accounts and uses them to harass other players. Each time I ban one of his accounts, he creates a new one. I've tried blocking his IP address, but that'...more >>

multiple stop and starts of Active Server Pages
Posted by João Condeço at 2/17/2006 12:27:06 AM
Hi, The Application Log of Eventviewer has multiple messages about Active Server Pages stopping and starting. The stop messages are as follows: Source: Active Server Pages Event ID: 4 Description: Service stopped. The start messages are as follows: Source: Active Server Pages Event...more >>

forcing browsers to SSL
Posted by titanic panic at 2/16/2006 10:23:26 PM
Hi, I'd like to setup IIS so that when users go to the urls: http://www.webserver.com http://webserver.com http://webserver.com/* it automatically forces them to SSL, i.e.: https://www.webserver.com It'd be nice if this was done without a redirect script and was a function/featu...more >>

IIS Issues
Posted by Kory at 2/16/2006 3:09:57 PM
I have a SBS 2003 running IIS 6.0. Website is running fine. In a website I have a section where I can fill out blanks and hit submit and all info is emailed to me. The file that is called on submit is:"FormMail.pl". Currently the file is located in the CGI-BIN directory in IIS. Problem is ...more >>

Mutiple SSL Sites [one] IP
Posted by Mr. Backup at 2/16/2006 11:38:54 AM
Multiple SSL Sites [one] IP I am looking into a method of hosting multiple SSL Enabled CMS Type Sites (I.E. Mambo Server for example or even PHPBB, for all whom may wonder). The issue is this; I am under [one] public IP Address. Although IIS will allow me to host as many sites as my se...more >>

running executable from asp.net on IIS
Posted by ThunderMusic at 2/16/2006 8:44:44 AM
Hi, I'm running an asp.net application on IIS (Windows XP pro, dev machine). The app must call an exe in order to run an API, but in the doc it says we must redirect to the .exe, but IIS asks me for my credentials every time (username/password) even if I don't have any authentication enab...more >>

HTTP and HTTPS sites on same physical server?
Posted by flynch NO[at]SPAM alternativenetworks.com at 2/16/2006 6:29:11 AM
Hi All, Looking for advice on the advisability of putting HTTP and HTTPS sites on same physical server where the certificate is associated. Obviously HTTPS addresses transfer of data rather than site/server security however it wold be great to get an authoritative view on this. Must admit ...more >>


DevelopmentNow Blog