Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008


all groups > iis security > february 2006 > threads for february 8 - 14, 2006

Filter by week: 1 2 3 4

disabling source code access
Posted by DCPUser at 2/14/2006 12:46:28 PM
I havea funky problem here. We have users, through MS Visual Studio, who are able to browse and read source codes of web apps that were developed even though from the global settings (properties of Default WebSite) and even locally on the folders themselves (and service master properties) the ...more >>

SSL
Posted by janetb at 2/14/2006 10:54:54 AM
I have a site comprised most of asp pages with ss includes for the headers, footers, etc. I have a Verisign ceritficate installed. On the page requiring the certificate, a prompt is given saying some of the site is not secure do you want to display yes/no. I've tried yes and no and can not ...more >>

IIS authentication on a RADIUS
Posted by Kailash at 2/13/2006 2:46:28 PM
Hi! Just wondering if anyone managed to set up HTTP or HTTPS authentication on a RADIUS server on an IIS server. I read that there is a software (Radiis) that can do it but I was hoping that someone managed to do it by other means. Thanks Kailash ...more >>

Problem with integrated IIS authentication on XP
Posted by Tim Gorgs at 2/13/2006 8:58:42 AM
Hi all, I have the following constellation: Windows 2003 Server with IIS and integrated windows authentication as the only authentication method When I request a page like http://myserver.com/file.html, it works fine with a Windows 2000 client (on the server I can log the requesting user...more >>

integrated windows authentication on IIS and SQL Server
Posted by Volkan at 2/13/2006 8:11:31 AM
I discovered that our web site, hosted on IIS 6.0, has both anonymous and integrated windows authentication on different folders (have no idea why...), when I try to just have the whole site set to Windows auth and disable anonymous auth, my asp pages are unable to connect to SQL server (where...more >>

Alternative Domain
Posted by Richard Mabbitt at 2/13/2006 3:25:29 AM
Hi We maintain our own web site www.strategic.eu.com We wish to access Analysis Services on another server - not the web server - called blade I have been able to allow access to cubes using Pivot Table Services in Excel by placing the msaolap.asp file in the wwwroot folder on blade itself ...more >>

IIS set security
Posted by Christian Ista at 2/11/2006 3:43:41 PM
Hello, On a server (Windows server 2003 SP1), I have some web site. I'd like people have access to this web site only and no access to the rest. And what about the "Defaut web site", may be I can reduce access to my own IP (I have a fixe IP at home) Do you have articles about security ...more >>

HTTP 403.6 error
Posted by Jeffatsc at 2/11/2006 6:39:27 AM
I'm running Small Business Server 2003 and Exchange. If I type https://10.0.0.1/exchange when I'm on the LAN, I get my OWA login screen. If I'm outside the office and I type in my normal URL which does point to the outside of my firewall and is translated to my Exchange server, I get the HTT...more >>



SSL POST connection with client authentification dropped by IIS 5/W2000 Server
Posted by Jean-Marc Desperrier at 2/10/2006 7:20:19 PM
Hi, We have a problem with a client installation when SSL POST connections with client authentification are sometimes dropped by IIS 5/W2000 Server. Drops means a TCP FIN sent by IIS once the client has finished sending his POST data, with not a single byte of data going from server to cl...more >>

Registry access from ASP
Posted by Robert Halford at 2/10/2006 12:29:33 PM
I have an ASP application running on windows server 2003. It needs to access the registry but is unable to read any data. I have used regedt32 to grant full access to all users for the registry key in question but the ASP page still can't access any values. ...more >>

How do I skip the IIS authetication prompt with anonymous dissabled?
Posted by ian at 2/10/2006 11:51:28 AM
We have a product which runs on our website which requires that Anonymous access not to be checked in IIS. It uses Basic or Integrated Windows authentication. We are also trying to create our own login screen for that product where a user can enter his/her userid and password and bypass the Bas...more >>

SSL and replication
Posted by Zorko at 2/10/2006 12:00:00 AM
Hi, We want to replicate IIS6 config between a primary and a standby server. Is there any problem with certificates when replicating IIS config with iiscnfg.vbs? regards Zorko ...more >>

IIS connect to SQL Server with "null" account.
Posted by Karn at 2/8/2006 7:10:31 PM
Hi all, my team has implemented web applications that running on Windows 2003 and IIS6.0 querying data from SQL 2000 Server. The IIS has Integrated Windows Authentication setting for user authentication. The web will query user data from SQL 2000 base on user authenticate. Normally the applica...more >>

Default domain problem
Posted by Zokro79 at 2/8/2006 3:27:01 PM
Hi, We have an domain with users. This users will have access to some resources trough IIS6. We use "Basic Authentication" to authenticate. Because users are domain-user and not created locally, they will have to enter domain\user to log in. I have entered "Default domain" under "authenticati...more >>

Integrated Fails. Basic Works
Posted by Chris Geier at 2/8/2006 3:25:27 PM
Here is my situation. 2 load balanced webservers (2003 SP1) hosting a series of websites. When I try to open the website i get prompted for username and password as I should. Then I get 401 error message telling me I am unauthorized. In this case it is a 401.1 error message. I know this...more >>


DevelopmentNow Blog