Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008


all groups > iis security > january 2007

ms odbc text driver error
Posted by JC at 1/31/2007 9:12:07 PM
Importing csv file using vs.net 2.0. I keep getting errors when I try and access a file using the odbc text driver. If I set the virtual directory to run under an admin account i can access the file. If I set the vd to run under the iuser account I get the following error. Microsoft OLE ...more >>

Win2K3 Integrated Authenticaton and file download issue?
Posted by Dan Marsden at 1/31/2007 3:15:01 PM
We have an issue on a Win2k3 Virtual Server sitting on a VMWARE box with Integrated Authentication. When Integrated Auth is turned on, sometime (not always!) large files get a time-out message when you try to download them. In fact, it even happens with some smaller files (but inconsistent...more >>

Issue with FTP and IE7
Posted by Santa at 1/31/2007 9:36:01 AM
HI Guys When i try to login to my FTP (IIS6.0) server from the user that i have created in the local server it is not taking me by default into the ftp directory that i have created from the same name as the user that i try to login. With IE6 i used to login to the users home directories f...more >>

SSL not working
Posted by Tommy Forsman at 1/31/2007 9:23:39 AM
Hi Have tried to enable SSL on a SBS2003 but when I require SSL the website stops to respond. Have installed CA services Have created Certificate request Have "downloaded" the pending request Have appended the certificate to the default website But when I put a checkmark in Require Sec...more >>

Root Directory and Write Permissions
Posted by iporter at 1/31/2007 9:19:21 AM
I'm vaguely aware that for security reasons, you shouldn't set write permissions to your root web directory. However, I have a ASP-based CMS that is designed to write html files and folders to the root directory. What are the risks? Thanks, Iain ...more >>

Unable to authenticate via kerberos to IIS site accepting client c
Posted by jacorona at 1/31/2007 2:27:00 AM
Hello all, After spending a few hours searching the web, I post this message to this newsgroup just in case what seems to me an strange behaviour could be due to IIS. I'm trying to access a web service hosted in an IIS site configured to accept both "Integrated Windows authentication" ...more >>

IUSR ACCOUNT PROBLEMS
Posted by Jose Perez | at 1/30/2007 9:43:00 AM
I hope someone can give me a had. Someone in my maitenece group has changed the password to this IUSR Account. This account is used for anonomus access. How can a restor this account to it's original state, just as a quick fix I created a new account and I am entering the password manually ...more >>

Cert not exportable
Posted by Mary Rafferty at 1/29/2007 7:01:43 PM
We have a copy of the original CSR. We have the Cert from Verisign. We have a PXF file for this. But the associated password is lost. The cert was imported into the current IIS6 site and that horrible default of the key not being exportable has left us with a bit of a problem. We need to...more >>



Help!! -- SSL Configuration
Posted by segis bata at 1/29/2007 5:43:57 PM
Hello all... I'm writing you because I want to configure an SSL site. I already added the certificate (filename.cer) to IIS (6.0 on Win2003) but I want to know how to assign certain folders to the https site. (for example: The "regular" site is at C:\IPub\Wroot\MySite; I want the files in t...more >>

set httpcontext and still use anonymous auth, demo site
Posted by Dan Brinkmann at 1/29/2007 12:53:01 PM
We are trying to setup a demo of our software on the internet and would like to avoid having a user login. Our application normally relies on Integrated Auth to determine the current user as much of the interface is determined based on who the user is and what rights they have. Our demo site...more >>

.net application cannot access metabase.xml iis6
Posted by Tessa at 1/29/2007 8:22:20 AM
Hi, I have to modify an existing .net windows application that directly edits the IIS6 metabase. (I don't have the option of deciding to use ADSI/WMI in a Script because it's an existing application). It's been working fine for a long time up to now on our test servers and our customers...more >>

SMTP Relay Problem
Posted by Help Needed at 1/27/2007 8:37:01 AM
Hi, I am getting error while using SMTP Relay, the error is 550 5.7.1 Unable to relay for prasadagv@gmail.com. We have Windows 2003 OS used to host our web site (a small business site developed in asp.net). We are using 'SMTP Virtual Server' and 'POP3 Service' components of Windows 20...more >>

access from internet/intranet
Posted by R.Demandt at 1/27/2007 4:54:00 AM
I have a wesite running that can be access both from internet or intranet. There are two directory's in the website, now I want to limited acces to one of the directory's to people in my intranet. How can I do this? Thanks for any response, R.Demandt...more >>

deny access to folders but dont want logon prompt
Posted by Spechty at 1/26/2007 11:46:04 AM
I am setting up an intranet site. I am using Frontpage and have the page published to an internal server. On the hard disk I have set NTFS permissions to the folders where I have certain pages and info. When denied users access the link to the folder the page is in, they are given a log o...more >>

IUSR_ and IWAM_ with admin privileges
Posted by Nicee at 1/26/2007 9:12:00 AM
An application has been purchased that requires the IUSR_ and IWAM_ accounts be placed in the local administrators group in order for the application to work. Could you please detail the security risks?...more >>

Windows 2003 server and web sharing
Posted by John at 1/25/2007 11:47:19 PM
I have a few questions about web sharing. 1. When you enable web sharing of a folder, what port does the user need to access the shared folder remotely? 2. If I set the security up in IIS for that folder, will it change the local intranet security for the local users? 3. In the web sharin...more >>

How secure is Digest Mode compared to Integrated Authentication
Posted by K12-Jammer at 1/25/2007 12:26:03 PM
While researching authentication on IIS I saw there were 3 options for authenication: Basic, Digest and Integrated Authentication. My requirements are that this works both on the Intranet and Internet. I would also prefer that the user enter only his short username and password (eg bsmith...more >>

HTTP 401.2: Unauthorized: can't access page
Posted by ben at 1/25/2007 9:21:35 AM
Hi, i have iis 5.1 on windows xp sp2. I created several asp.net applications for our intranet, using the windows integrated authentifiaction method, because those applications are only for internal users. Now recently, i made an application which is accessible by any anonymous user. I c...more >>

Custom 401, basic authentication, ISAPI problem
Posted by javawzl at 1/24/2007 8:41:02 PM
We have a custom ISAPI for authentication and authorization running on 2003 server. Basic Authentication is setup. A custom 401 has been setup on the site. When we attempt to access the site we are prompted for username/password. If we choose to CANCEL at this point the 401 is shown up to 2,...more >>

Cannot get Cert authentication with directory service mapping to work
Posted by C Low at 1/24/2007 12:47:12 PM
Hi I've setup an IIS 6 server (on Win2K3 server) to do 2-way SSL using cert-based authentication with smart cards. On the IIS web site, I have these settings: * Anonymous access - disabled * Integrated Windows authentication -- enabled * Require client certs - enabled * Client certific...more >>

URLscan 2.5 does not scan for CGI parameters
Posted by cilmberg NO[at]SPAM opentext.com at 1/24/2007 3:03:12 AM
Hi, I have IIS 6 on windows 2003sp1 with urlscan 2.5 running a cgi application. I want to have certain characters to be removed from the whole url including cgi parameters. Unfortunately the urlscan only checks till the '?' parameter which says that the cgi parameters are following. Unfort...more >>

About .NET and Server too Busy Error
Posted by io.com NO[at]SPAM newsgroup.nospam at 1/23/2007 5:42:22 PM
Hi, i have a web application make in .NET 1.1 SP1 and sometime the customers telle me that this error occurred : <body bgcolor="white"> <span><H1>Server Error in '/MyApp' Application.<hr width=100% size=1 color=silver></H1> <h2> <i>Server Too Bus...more >>

Integrated Windows Authentication
Posted by Richard C at 1/23/2007 3:28:12 AM
Hi, I have configured a website within IIS6 on Windows Server 2003 but am having issues with IIS Integrated Windows Authentication. Each time I try and access a test page in the root of the website I am being prompted for the username, password and domain. After 3 unsuccessful tries I am p...more >>

Kerberos security on Windows 2003 using Sharepoing 2007
Posted by Nobody at 1/20/2007 9:40:29 PM
Hello, I spend last few days trying to setup excel services to connect to SQL Server Analysis Services on different machine using Kerberos without any luck, so I would really appreaciate any help I could get here. Few questions I have are: I have IIS on machine MyMachine1 but I created web...more >>

Intranet security question
Posted by Rob at 1/20/2007 6:19:00 AM
Hi, I have 2 websites on a IIS machine. one of them is open to the public and another one should be only accessable from inside the network (LAN). What has to be done in order to secure it, so peolpe from outside wont be able to see the Intranet website. Thanks a lot for any comment. Rob...more >>

Forcing Single w3wp Identity
Posted by Tony Proctor at 1/19/2007 9:02:44 PM
Is it possible to force a w3wp process to always run under a specific non-admin account when users are authenticated by different means? What I have is two virtual directories: one with Windows authentication, supporting a minimal set of internal Windows accounts, and one using Anonymous authe...more >>

401.1 error reported by an anonymous user but anonymous access is allowed and no other access problems have been reported
Posted by ssharma at 1/18/2007 5:37:50 PM
Hello, I have a website set up on a WIndows 2003 Server, IIS6. I have one (anonymous) user browsing to our website and getting prompted for a username and password and then getting the http 401.1 error. This isn't happening with anyone else that I know of....the website has been accessed...more >>

IIS Default Domain?
Posted by Justin Rich at 1/18/2007 12:39:23 PM
I have a server that has an internal domain and has an internet domain, which do not match. right now in order to get people to login i have to do Internaldomain\user as the username otherwise it assume ExternalDomain\users how do i get it to assume the internal domain? the website secu...more >>

Integrated Windows Authentication and Windows XP for ASP.NET Application
Posted by aartinawanishah NO[at]SPAM gmail.com at 1/18/2007 6:32:08 AM
We are running an IIS 5.1 on a Windows 2000 Server using Integrated Windows Authentication to connect to our ASP.NET intranet application. All users are able to connect without having to enter their login name and password. Only users running IE on a Windows XP platform (both with and without...more >>

Application Problem on Windows 2003 Server
Posted by noisefree at 1/17/2007 7:21:48 AM
Hello, I have a problem on an application I am developing: This C# Windows Application calls a C# Web Service, which it uses the SourceSafeTypeLib DLL to interact with Visual Source Safe 6. The problem comes out when I call the VSS method "Get(ref string Local, int flags)", which should g...more >>

Directory Security configuration is grey for FTP sites in Vista Business RTM's IIS 6
Posted by Yannick Berker at 1/13/2007 3:35:54 PM
Hi, i already gave nearly all the information in the topic, so I'll make it short: I want to restrict access to an FTP site by IP address, but I can't, the configuration buttons are greyed out. It looks like this (in German): http://berker.campus.ecp.fr/directory-security.jpg I also can'...more >>

Simple Authinitication
Posted by Tango T at 1/13/2007 8:00:32 AM
Stand alone Windows 2003 Server Standard W IIS6. I have a website that works great using anonymous authentication. I would like to lock it down so a user has to enter a local user account, username and PW. If I uncheck Anonymous Authentication and give the local user rights to the folde...more >>

Don't think your computer has errors
Posted by eqpsdidunywe NO[at]SPAM yahoo.com at 1/12/2007 4:53:01 AM
It's a known fact that over 93.7% of computers that are over 30 days old are infected with spyware and adware. Such software is rarely accompanied by an uninstall utility and even when it is it almost always leaves broken Windows Registry errors behind it. Even if you bought a spyware remover to...more >>

Internal Website - IIS Error
Posted by Guido at 1/10/2007 12:12:01 AM
On a new Windows SBS 2003 we have created the website in IIS. If we try to access the website externally we get the following error: HTTP Error 403.6 - Forbidden: IP address of the client has been rejected. Internet Information Services (IIS) If we try to access the website fron inside the n...more >>

Trouble Accessing page specified by AuthExpiredURL Metabase entry
Posted by Kenneth Baltrinic at 1/5/2007 3:58:31 PM
I am a lead .Net developer on a large government web application running on IIS 6.0/Win 2003 Server. We are using basic authentication over SSL authenticating against an active directory. There is a new mandate that we implement a password change function that allows users with expired pas...more >>

runtime error '800a01fb'
Posted by TAO at 1/3/2007 3:16:00 AM
The hosting server is running Win2003 , my code is reading from a registered DLL file on the same server : The following is where the code stop... 30 Dim TransVal, varPaymentID, varPaymentPage, varErrorMsg, varRawResponse 31 32 TransVal = MyObj.PerformTransaction 33 varRawResponse = MyO...more >>

Strange Security Problem
Posted by Slant at 1/2/2007 4:23:42 PM
Good day! I'm an Apache user for the most part and am trying to setup an IIS server on the same system (using port 8000 to resolve obvious conflicts) for cross-server testing since one of my prod servers is an IIS server. I've had Apache/PHP/MySQL setup for about a year now on my local sys...more >>

IIS Browsing
Posted by Andrea :-) at 1/1/2007 11:10:19 PM
Hello i've a great problem with IIS (5 or 6). I have all my website in a Subfolder of C. If I Place on a WebSite (casual) an ASP tools to browsing directory, I can "navigate" the other site and all the server's disk structure (Windows directory included). My Web work with IIS Users.(IUSR) ...more >>

No longer can edit changes to my web server using FrontPage 2003
Posted by ricpedtech at 1/1/2007 8:59:00 AM
I can no longer edit my web pages by opening my website in a browser on my laptop or any remote computer, logging on to my web server (2003 Standard OS) and edit using FrontPage. By opening FrontPage, I would be asked for my server's username and password. I can still edit my webpage, bu...more >>


DevelopmentNow Blog