Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
all groups > iis security > july 2007

CSS won't work in IIS7/.NET
Posted by MR. G.EEK at 7/31/2007 11:06:01 AM
I've been testing Vista Ultimate as a developer platform. I have set up SQL2K5 and VS2005. The next step was to port over an existing site from IIS6. The problem I am having is with the CSS files that are located in the Master Page. The application runs fine but there is no formating and no im...more >>


IIS Error - HTTP Error 401.1 - Unauthorized: Access is denied....
Posted by MAF at 7/31/2007 3:10:01 AM
Hi, Iam getting the following error message when i try to access: HTTP Error 401.1 - Unauthorized: Access is denied due to invalid credentials. http://localhost/ or any part of the website on my Server which is having Windows 2003 server with IIS 6.0, the problem is that when we restart th...more >>

Auto log in with basic authentication
Posted by ThatsIT.net.au at 7/27/2007 11:07:58 PM
I am currently setting up a intranet that will not be available from outside the network, also a extranet that will be available from outside the network. The extranet has basic authentication and SSL. it passes though a ISA 2000 firewall and for various reasons we need to use basic authentic...more >>

IIS / ALIAS
Posted by grumblenoise NO[at]SPAM googlemail.com at 7/27/2007 2:46:12 AM
Hi, I've set-up a website in IIS. I'd like to change the default IIS alias from http://servername/websitename to something a bit more user friendly. How do I change this? I'm not sure if I need to be doing something in DNS or not. Cheers. ...more >>

AntiVir on IIS
Posted by doob at 7/26/2007 10:41:05 AM
Hi, i want to use an antivir-solution for an IIS Webserver. There are two users with an account to upload files or administrate the system. every antivir-software asks how much users I want to licence. I think there is a licence needed for just two users. Is this correct? Thanks in advance... t...more >>

Can't Export Private Key -Option not available.
Posted by Anthony Smith at 7/24/2007 5:38:05 PM
Good Afternoon, I hope everyone is doing well. Were running Server 2003 SP1 and I generated a request through /localhost/certsrv and I chose the option to mark Key as exportable and I specified a .pvk file to export the key. I then went into the CA and issued the Cert. I then went into the I...more >>

Allow jar files to be served without authentification?
Posted by Crystal at 7/24/2007 7:20:02 AM
We have IIS configured to require SSL and allow anonymous access is disabled. I need to be able to allow .jar files to be served up without authentification. With anonymous access enabled, our .jar files are served up. With it disabled, we are continually prompted for a User Name and Pass...more >>

Login prompt
Posted by Cwhitmore at 7/20/2007 10:16:00 PM
I have a website that is suppose to use Windows Authentication. When I access the website the login box pops up and allows me to type in my login and password, but then I hit Enter it pops back up again like I never his Enter. I'm using IIS 6.0 on a member (Windows 2003 R2) server. Any ideas...more >>



SSL - Problem connecting WebService by IP number
Posted by Mrozik at 7/19/2007 12:00:00 AM
Hi! I have strange situation after deploing WebService in client environment. WebService is written in .NET 2.0, resides on separate site (Win 2003) and is secured by SSL. And when client applications try to connect using IP number (https://192.168.100.100:8892/Service.asmx) I get strange er...more >>

What are the known security of IIS with WebDav??
Posted by WilliamVeldhuizen. NO[at]SPAM .somewhere.com at 7/17/2007 2:44:16 PM
We have plans for implement WebDav in our Web-application and therefore i am searching some information about WebDav on the IIS platform. Our internet hosting provider tells about some security problems with WebDav and they are wary for hosting WebDav. Unfortunately, they can't tell me the e...more >>

IIS SSL spoof detected by firewall
Posted by Bob Jones at 7/16/2007 4:59:54 PM
Hi all, I'm supporting an external web site with IIS6 and SSL on a server with Windows 2003 (dual nic cards). There is an internal web application on the same box using one of the NIC cards, which is behind the firewall and not accessible to the net. The external site is using the other c...more >>

Problem with Kerberos Delegation
Posted by Alex Krugor at 7/14/2007 4:28:00 PM
I have: 1. W2K3 Native Domain 2. Client W2K3 SP2 3. Server A - W2K3 SP2, IIS, SQL Server Reporting Services under Local System 4. For Server A - HTTP/SERVERA.DOMAIN; HTTP/SERVERA; HOST/SERVERA; HOST/SERVERA.DOMAIN 5. Server B - W2K3 SP2, IIS, SQL 2K5 under DOMAIN\SQL 6. For Server B - HTTP/...more >>

IIS,SQL Server and Windows Authentication
Posted by Garth Wells at 7/11/2007 6:41:53 PM
I have two servers that are member servers in a trusted domain. One has IIS 6.0 on 2003 and the other SS on 2003. In an effort to enable Integrated Authentication I completed the following: 1. Created an application pool named: AppXPortal 2. Changed the Identity for the AppXPortal pool to Lo...more >>

W2K3 vs WK2K Perf mon Curent anonymous users
Posted by tolgay at 7/11/2007 6:36:15 PM
Is there any diffrences bettwen win2k and win2k3 web services current anonymous users performance counter. There is a web site which is hosted from two servers with DNS round robin ( that means two server has the same weight connection) one of the servers is windows 2000 IIS5.0 and the other on...more >>

Is it safe using Basic Authentication when using HTTPS
Posted by Paw Pedersen at 7/11/2007 5:07:21 PM
As far as I can find out, the SSL handshake is being done before the basic authentication credentials is passed through the network, so it will be encrypted, and not possible to sniff. Can anybody please confirm that? Best regards Paw Pedersen ...more >>

'Corporate login' for a customer to a website
Posted by Paul at 7/11/2007 12:23:59 PM
Hi, We have a website on IIS6, for which we want some customers to have the option of accessing via clicking a button only. Initial thought was to validate on the IP address, assuming the IP we receive is their public facing firewall or their own proxy. However, some customers go through ...more >>

Security logs...
Posted by Vibbert at 7/11/2007 12:18:01 PM
I found about 3000 of these security entires <below> this morning and am concerned. I cannot ascertain if it is an outside attack of some sort if if there is an IIS related service that has gone awry. The default adminsitrator account has been changed, so I know this login is not correct. (Con...more >>

IIS and SharePoint services 3.0
Posted by Juha Kalliola at 7/10/2007 8:52:00 AM
Hi, I installed SharePoint Services 3.0 to IIS6. After that I deleted old ones (SBS 2003 companyweb etc.) I made a new site with the name companyweb. Internally everything works fine but I can't access the site from WEB. I made all settngs as they were in the old site, names, ip's etc. ...more >>

SSL certificate problem
Posted by Arttu Arstila at 7/10/2007 3:28:03 AM
Hello, We have a Win2003R2sp2 server with one MOSS web application and a shared services site. This have their own subdomains (site1.domain.com & site2.domain.com) which point to separate ip addresses (let's just say IP1 & IP2). Both sites use SSL, and we have installed certificates for ...more >>

Client and Server NTLM authentication
Posted by reuben_hecquet NO[at]SPAM hotmail.com at 7/9/2007 10:46:03 AM
I have a configuration where integrated authentication is enabled for an IIS6 website. Some of the users are logging into their machines on a secure section of the network that has very limited access to the webserver (only HTTP traffic permitted). The clients logon to a foreign domain that has ...more >>

Unable to publish and unable to access SharePoint Administration
Posted by JK in Nebraska at 7/5/2007 7:16:01 AM
My Server is on Win2003 with IIS 6. For some reason, I am unable to publish. I receive the error: "Unable to create the Web 'http://ts/ccp/seminar/'. You are not authorized to perform the current operation. Error: Unable to create the Web 'http://ts/ccp/seminar/'. You are not authorized to ...more >>


DevelopmentNow Blog