Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
all groups > iis security > march 2006 > threads for march 22 - 28, 2006

Filter by week: 1 2 3 4 5

IIS Version and Interanl IP being Revealed
Posted by DoktorWho at 3/28/2006 11:20:02 AM
During a recent security scan of our IIS 6 box, it was shown that the II Version, 6 in this case, and the Internal IP address of the box were being shown externally. Why would this be and how can I fix this. The box is natted behind a firewall....more >>


Anonymous Account not working
Posted by Ishmealm at 3/28/2006 7:27:05 AM
Hi, I recently built a new webserver to replace an existing server. I copied the data to the new server and rebuilt all of the IIS directories by hand. I replaced the broken SID of the old IUSR account on all of the folders with the new IUSR account from the new server. Now when I try...more >>

IIS 5 allows anonymous editing via Frontpage
Posted by Tim100873 at 3/27/2006 5:12:01 PM
Greetings, We are running IIS 5, and have run the lockdown tool (2.1) using the FPEx template. We have noticed that anyone that opens the website inside Frontpage can edit the contents of all websites on this server without being prompted for a password. We hope this is a simple misconfigu...more >>

Passing form credentials to windows security
Posted by Doug at 3/27/2006 12:23:01 PM
Ok to explain my scenario here is my goal I have an intranet site that is available internally as well as externally. Currently it is just html files on the intranet (that change may come later which will make it easy to secure via an application, unfortunately right now that is not an opt...more >>

IIS6 'forgets' "Connect As" password for Virtual Directory
Posted by Richard Manion at 3/27/2006 10:55:02 AM
I have a website that contains a virtual directory mapped to a UNC using a domain account under "Connect As." Users are normally able to browse the virtual directory without incident. The site exist on an NLB cluster. Occasionally, one or two of the servers will forget the "Connect As" Passw...more >>

Cannot connect to Web Server from Different Domain
Posted by nai at 3/27/2006 2:14:02 AM
Hi all, We have two domains in here and are currently migrating users from Domain A to Domain B. We have a trust relationship setup between the two and are using Windows Integrated Security for Authentication. My IIS Server is in Domain A. I can connect to the webserver using User X ...more >>

403 (Forbidden) after setting up SSL Redirect
Posted by AHoff at 3/24/2006 10:51:03 AM
I've gone through the steps of redirecting HTTP requests to HTTPS for OWA as outlined in KB-839357. I've checked, rechecked, and checked again that all steps were followed but I still get: HTTP Error 403 - Forbidden You are not authorized to view this page My head hurts from banging it on...more >>

Single authentication for multiple IIS 6 servers
Posted by news.microsoft.com at 3/24/2006 10:29:56 AM
Thanks in advance for your help ... Environment: .. We have several IIS servers, one for each of the following: Exchange 2003 OWA, Sharepoint 2003, and CRM 3. .. All are Windows 2003 and part of the same domain .. Web access is set to integrated on all servers. .. Network is behind a Symant...more >>



HTTP_AUTHORIZATION header
Posted by AWillemsen at 3/24/2006 7:33:02 AM
I am running IIS 5.1 on XP SP2. I have two virtual directories in the same Web site that have anonymous access disabled - one contains HTML pages and the other contains a CGI executable. One of the HTML pages has a form which executes the CGI. If I open a new browser window, and then ope...more >>

Can't audit security events
Posted by Vic at 3/23/2006 9:16:32 AM
Heres my problem: There is a webserver at work, win2k, that originally was joined to the domain, but is always logged on locally. We can't get it to audit security events - domain policies override local policies. We logged on with an admin account from the domain to attempt to look at the...more >>

Multiple SSL certs on virtual servers - again
Posted by justageezer at 3/23/2006 4:15:28 AM
Hi all, I've read the posts on multiple SSL certs on virtual servers, as well as the kb articles (again) and I'm wondering if anyone has had the same issue I'm getting now. In the past I've always managed to get multiple certs working by either using a different port or a different IP address...more >>

Is there a way of downloading .cer files like you would do with .doc or .MP3
Posted by Lion at 3/23/2006 12:00:00 AM
I'm using IIS 6.0 on a Windows 2003 Std, I have created Virtual Directory called test\ and in there I have index.htm and also web.cer (web.cer is the certificate that I want my users to download for there PDA's) the index.htm displays OK but when I click on to the link that points to web.cer I...more >>


DevelopmentNow Blog