Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > iis security > july 2006 > threads for july 15 - 21, 2006

Filter by week: 1 2 3 4 5

iis problems with some xp clients - kerberos issue?
Posted by mahalie NO[at]SPAM gmail.com at 7/21/2006 5:06:11 PM
I'm the web dev for a 200 person company, everything herein is in our corporate domain. We use Kerberos authentication - the domain controler is a win2k server. In short I have an Intranet server (win2k) hosting a .net 2 application and a test server (win2k) hosting a classic asp page. Both...more >>


IIS 5.0 vs IIS 6.0
Posted by Antero at 7/21/2006 2:21:01 PM
Greetings, I have an asp page that allows me to start and stop services on my windows 2000 server and run some batch files as well. Now that we are upgrading to windows 2003 this page is not working. I have changed the security parameters on IIS 6.0 but still I cant run my batch (I am using...more >>

IIS + SQL (Not enough storage is available to complete this operation)
Posted by tolgay at 7/19/2006 6:26:36 PM
Sometimes we got an error (Not enough storage is available to complete this operation) from one of our servers which on win2000 sp 4 iis5.0 (all hotfix installed) sql server sp4. mdac 2.81. It occures random and we could not find the error reason. When the error occured the server cpu or mem or I...more >>

HTTP 405: The HTTP verb used to access this page is not allowed
Posted by bvlmv NO[at]SPAM hotmail.com at 7/19/2006 2:34:21 PM
Hi I started to get this error after I inserted tables into my index.htm page. I have a small form (username/password) that runs to a small .asp page which then redirect based on information provided. I read a couple of post regarding this situation and it talks about installing a perl CGI sc...more >>

- How to setup AD authentication when IIS in in the DMZ?
Posted by Dan at 7/19/2006 10:06:40 AM
I need to be able to access AD to authenticate users coming to a .NET application running on an IIS which is in the DMZ... Here are the details: My .NET app resides on a Win 2003 Server with IIS6 in the DMZ of the firewall Win 2000 AD tree can be accessed through a dedicated server via IP...more >>

Integrated Windows Authentication results in -2146893052 (0x80090304)
Posted by mmichaels at 7/18/2006 11:39:05 PM
I have a website on Windows 2000 server with only IWA enabled. I can log into the site just fine, but if I type a bad password I get an HTTP 500 error. I can't figure out why I'm not reprompted for the password at least another time or two. I turned off "friendly errors" in IE and I now get ...more >>

Microsoft URL Scan
Posted by Brad Baker at 7/18/2006 8:25:00 PM
Our web servers run IIS5 and we also make use of the Microsoft URL Scan utility: (http://www.microsoft.com/technet/security/tools/urlscan.mspx). By default Microsoft's URL scan utility blocks a number HTTP Methods including "HEAD". We have a number of clients concerned that blocking the HE...more >>

suppressing http banner in IIS 6.0
Posted by DD at 7/18/2006 1:01:01 PM
I know you can suppress the ftp banner in IIS 6.0 - but how do you suppress the http banner from displaying the web version? I was able to do it back in IIS 5, but it no longer works in IIS 6.0 (W2K3 SP1). We usually get written up about this during Security Assessments but the security vendo...more >>



IIS default file permissions used improperly?
Posted by CyrexCore2k at 7/18/2006 11:32:01 AM
This applies to IIS 6.0 with all current service packs at the time of this post. If you set the file permissions for any default page in a directory they will be overridden by directory permissions if the web request does not include the file name. www.abc.com/mydirectory/ Will use direc...more >>

SSL's and NLB
Posted by Jose at 7/17/2006 12:04:49 PM
Folks, I have 3 url's webmail.a.com, webmail.b.com and webmail.c.com pointing to a single public IP. I also have 2 OWA FE servers doing NLB with a single default website. We would like to purchase an SSL from Thawte and they told us that we need 3 public IP's an public IP per domain name. Als...more >>

certificate not saved after reboot
Posted by kenl NO[at]SPAM cmhsa.org at 7/17/2006 8:38:02 AM
When user installs certificate, he is able to access the secure website. But after he reboots, the certificate is no longer present. What can i do or look for to resolve this? Your help is much appreciated. Ken ...more >>

Pass though authenticateion
Posted by l3msip at 7/17/2006 2:28:01 AM
Hi, My Setup Server A is a W2003 server provinding sharepoint services. Using ssl 128 bit ssl. Server B is my mail server providing 128bit ssl owa. When Uses connect (externally) to server a they logon as expected but if they cllick on a hyperlink to Server b OWA services they are propmeted...more >>

SSL warning message for Intranet site
Posted by l3msip at 7/17/2006 2:19:01 AM
Hi, I have an intranet site that is set up using ssl 128bit encryption (using my own certificate server- windows 2003 server (so thats iis 6.0) The name i used set for the 'issued to' part is its fqdn (intranet.domain.co.uk) when using the FQDN (https://intranet.domain.co.uk) it works ...more >>


DevelopmentNow Blog