Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
all groups > iis security > may 2006 > threads for may 15 - 21, 2006

Filter by week: 1 2 3 4 5

One Domain with 2 websites and 2 SSL Certs
Posted by Word problems at 5/21/2006 6:25:01 PM
Greetings All, I am running a Win2003 SBS Standard server. I have 2 websites running on the server in the same domain. I have added a second IP to the server and assigned each website an IP address. I have also created separate SSL certs for each website and enabled port 443 for both. I hav...more >>


handling files on another server within same workgroyp !!??
Posted by Rafi at 5/21/2006 8:15:01 AM
hi, i have a web application running under win2003 with IIS6. there are ASP pages that access and modify local files located in c:\folder1\folder2\*.* every thing works fine. I would like to move the files to another server on the same workgroup (there is no NT domain). the IIS server a...more >>

Adding Administrator to NTFS permissions gives full control to WebDav
Posted by Tim Guy at 5/19/2006 9:54:21 PM
I have an IIS 6.0 server which is running Webfolders/WebDav If the administrator has full control to a Webfolder then ANY user that is part of the domain can logon to that virtual folder where they dont have NTFS permissions to it. Other IIS servers on the same domain dont have this proble...more >>

Still asking for authentication
Posted by mike.baranski NO[at]SPAM gmail.com at 5/19/2006 1:29:16 PM
I setup a website which should have anon access. Under the IIS manager, I clicked the anonymous access checkbox. I restarted the webserver. It still asks for a password and username. I double checked the user account for anon access, and verified the passwords match. Stil asks for un...more >>

XP FIREWALL ERROR "Due to an unidentified problem. windows cannot
Posted by netprophet at 5/19/2006 11:02:02 AM
I have posted this in the IIS section which may indeed be the wrong place ! I have XP Professional SP2 and during installing and messinga round with IIS my Firewall stop working and cannot be displayed and therefore activated. The error says " "Due to an unidentified problem. windows cannot ...more >>

fileshare on my website
Posted by Nigel.UK. at 5/19/2006 1:21:02 AM
I am running wsbs2003sp1 on one machine and w2003sp1 and iis on my web server. My website is visible on the www but clients cannot open pdf documents, which i can open in my own browser. apparently ipnat.sys is running on the wsbs machine and windows firewall on the web server. I have tried o...more >>

<customErrors> confusion
Posted by Jayyde at 5/18/2006 5:11:37 PM
New to this so please bear with me... I set up the: <customErrors mode="On" defaultRedirect="~/Unavailable.aspx"> </customErrors> And what it'll do is redirect to the Unavailable.aspx page, but then bring up ASP errors saying how it can't display what's going on and in order for it...more >>

Certificate Services Web Enrollment Support not working
Posted by msteinhoff at 5/18/2006 2:48:14 PM
I have installed Certificate Services and Certificate Services Web Enrollment Support. My problem stems from the fact that when I go to http://servername/cersrv I get a 404 Page cannot be found error. This occurs on the server and from a desktop. OS: w2k3 IIS 6.0 I am trying to get th...more >>



a new idea to prevent DoS attacks
Posted by Eng.Rana NO[at]SPAM gmail.com at 5/18/2006 1:29:16 AM
Dear ALL, i was wondering if there exists any plugins or filters for IIS that will allow me to limit the number of requests from a specifi IP address. or to automatically decrease the number of requests achieved from a single clients that we doubt that he is trying to carry a DoS attack due ...more >>

Dumb basic authentication and SSL question
Posted by Anthony Yates at 5/17/2006 6:10:53 PM
I have a web directory protected by SSL and basic authentication. It works fine. The user is prompted to authenticate before the page is displayed. It bothers me that there is no SSL padlock shown on the page during the basic authentication. I am guessing the logon is encrypted anyway, but I'd ...more >>

Kerberos timout with IIS6, ASP.Net and SQLServer
Posted by roarfred NO[at]SPAM gmail.com at 5/17/2006 1:34:15 PM
I've been struggling with a problem for the last two months that are almost driving me nuts... We have a traditional ASP.Net 1.1 web site accessing a SQL2000 database using delegation and a trusted connection. I have seen many posts regarding this setup, and we had quite some trouble getting i...more >>

What dictates whether the LOGON_USER Server Variable is sent?
Posted by nickbdavies NO[at]SPAM gmail.com at 5/17/2006 7:12:19 AM
Hi I'm using IIS 5.1 and I am trying to gain an understanding of what dictates whether a client sends logon credentials, in order for the Server Variable LOGON_USER to be accessible (i.e. contain useful info)? The current setup I'm working with is as follows ... There are ASP pages st...more >>

IIS6 security problem
Posted by LT_Hassan at 5/17/2006 4:25:10 AM
We have a little situation here: We have two servers - one web server and another fileserver. We need to expose some files located on the fileserver to users, but the file server itself is not exposed to the internet. So we created a virtual directory on our website and mapped it to the required...more >>

IWA not working
Posted by Ishmealm at 5/16/2006 8:07:03 AM
I recently upgraded to IIS 6. In the past we haven't used Intergrated Windows Authenication, but I thought that it would be nice to start using that instead of Basic Authenication w\ SSL. For some reason it doesn't work. I get prompted for a username\password even when I use IE (v6 SP2) whe...more >>

Issuing a certificate
Posted by Zart the Artist at 5/16/2006 5:51:03 AM
I have set up a Standalone CA on a DC with W2k3 (test lab) I have created a new certificate that is pending autorization from a CA. I am trying to use this pending request with my CA and I am having difficulty with this process. I have read the doco and have learned that a web interface on my C...more >>

SSL certificates without AD
Posted by Frederik Vanderhaeghe at 5/16/2006 12:00:00 AM
Hi, Is it possible to give user certificates to users without having a AD, we are using a member server. If it is possible, how? Fré ...more >>

Service principal name (SPN) / Active Directory Problem
Posted by RCarbol at 5/15/2006 2:53:02 PM
I'm having problems getting a web application working -- it's throwing a 403 error. I ran AuthDiag to determine what was wrong, and it's giving me the message: Service principal name (SPN) for user 'DOMAIN\MACHINE_asp' not found in Active Directory Is there something I can run (preferab...more >>

HTTP 501 - Not Implemented
Posted by Garth at 5/15/2006 8:40:02 AM
I am using the HTTP PUT command to upload images to IIS server. Same code uploading to IIS 5.0 works great, uploading to IIS 6.0 throws error "(501) Not Implemented". This error code is confirmed in the IIS log file. Write properties are enabled on the web folder, Read Only property is di...more >>

HTTPS : Secured and non secured item with absolute path
Posted by trihanhcie NO[at]SPAM gmail.com at 5/15/2006 5:13:25 AM
Hi, I have a <img src = "http:// ..."> which needs to be put in a secured page. For example on amazon when the confirmation page is displayed... The problem is that it's a secured page (https) and my tag is an absolute path... It looks like it's the problem because the tag is not secured. Wha...more >>


DevelopmentNow Blog