Groups | Blog | Home


Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008
all groups > iis security > august 2006 > threads for august 8 - 14, 2006

Filter by week: 1 2 3 4 5

IIS6 and SSLv2
Posted by Blake at 8/14/2006 10:41:01 AM
Our InfoSec people are obviously bored. Is there a straightforward to way to configure IIS 6.0 to not allow client connections using SSLv2 (and only respond to SSLv3)? I have read the following: http://support.microsoft.com/kb/299875/en-us http://support.microsoft.com/kb/216482 http://sup...more >>


IIS6 promps for authentication when trying to execute DLL references....
Posted by dbarker1 NO[at]SPAM progressive.com at 8/14/2006 7:36:53 AM
All, I have an application that is currently working in IIS5 that when elevated to a IIS6 machine is causing some problems. I have a .Net application that is running under the default application pool "Network Server" account. My application uses a .Net to Java bridge (proxy) to use a 3rd p...more >>

Problem with IIS windows authentication
Posted by jakeh11 NO[at]SPAM gmail.com at 8/13/2006 7:52:14 AM
We are having problems with windows authentication in IIS on one of our domain controllers. Here's what we have done: We have setup a test virtual directory in the default web site to D:\WebSites\WebSiteA, disabled anonymous access and enabled windows authentication. Everything works fine. But, ...more >>

Is it possible for a trusted site to serve up an untrusted page?
Posted by Stephen Walch at 8/11/2006 11:03:31 AM
I am building a server application which I expect to run on servers that are in the Trusted Sites zone for many of my users. However, I will be serving up content that, in some cases, comes from third parties and it is theoretically possible that some of that content might contain malicious scr...more >>

IIS 5 / 6 .htaccess
Posted by beachboy at 8/9/2006 6:15:10 PM
Hello all, I want to protect the file from special folder, but keep the access for editor from CMS (Content Management System) , Is possible to do that on IIS 5 / 6?? e.g: protected folder: http://website1/download/ , but editor can login to CMS and read and write a file from that directory...more >>

users log into ftp://domainnameA.com and see domainB.com's directo
Posted by roy at 8/9/2006 4:10:06 PM
When a user (that's in active directory) logs into ftp://domainnameA.com he sees the home directory of domainnameB.com.... it is happening to all domains. In other words it's like any account user name all see D:\inetpub\domains\domainnameb even though the home directory of every domainame...more >>

How do I allow access to IIS Manager for web developer?
Posted by Mike H at 8/9/2006 10:05:02 AM
Hello, Sometimes we need to restart the IIS services on our intranet server due to the intranet hanging. I am trying to figure out how I can grant my web developer access to the IIS Manager remotely so that he can restart IIS when needed. This is the quick fix to the hanging problems. The int...more >>

ASP.NET 1.1 + IIS 5 + Nagios
Posted by danielsanberger NO[at]SPAM googlemail.com at 8/9/2006 1:57:12 AM
Hi all there, we have a APS.NET 1.1 Application running on IIS 5 and SQL Server 2000. We use Integrated Windows Security. Now we want to monitor the application by use of Nagios. It seems that Nagios doesn't support keberos. So another idea is to additionally set basic authentication that a...more >>



Q: Renew SSL cerificate
Posted by Aras Kucinskas at 8/8/2006 3:46:32 PM
I asked one off RapidSSL reseller to renew SSL certificate for web site on IIS 6. The reseller has generated a renewal certificate without any renewal request from me. Is possible to install this certificate? Is possible to generate renewal certificate without any renewal request info? ...more >>

User gets challenged for authentication when opening a document
Posted by John Beschler at 8/8/2006 3:27:02 PM
WE have a WEB-Based application that (among other things) generates an excel spreadsheet that is returned to the user. The entire site is SSL secured and uses NTFS permissions for all pages. All users must have a domain account to access the site. When initially entering the site, they a...more >>

SSL required on non SharePoint web site
Posted by Leslie at 8/8/2006 12:44:02 PM
I have installed a web application in a virtual directory under the default web site. Before I installed the application, SharePoint was already installed. When I attempted to browse to my default page in my web site, I get a message that says, "HTTP Error 403.4 - Forbidden: SSL is require...more >>


DevelopmentNow Blog