Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
all groups > iis security > march 2008

Allow upload of app_* directories through WebDAV
Posted by Heinrich Moser at 3/31/2008 5:49:02 PM
Hi! We are using WebDAV to publish our ASP.NET applications to an IIS 6.0 server (W2k3). Everything works fine so far (including uploading aspx files, after we discovered that "script source access" needs to be activated), except for uploading App_* directories (App_Data, App_LocalResources, ...more >>


Kerberos and IIS6 issues
Posted by trm1995 at 3/31/2008 5:06:39 PM
I'm seeing a problem in trying to get a web application to authenticate cleanly and Not getting a lot of targeted errors that provide sufficient info to troubleshoot effectively, so here I am. Environment: all affected systems are in a single domain run by a Win 2k3R2 server, relatively up...more >>

Still expired password changing using IISADMPWD with IIS6
Posted by Vic at 3/28/2008 9:24:05 AM
Configured IIS6 on W2003 using Microsoft document : - created iisadmpwd virtual directory - registered iispwdchg.dll - configured metabase PasswordChangeFlags Users can manually get page aexp2b.asp but when a user with an expired password tries to acess the web site he isn't redirected to th...more >>

Login Loop
Posted by BigSam at 3/27/2008 1:46:01 PM
On our web server we have a virtual web site used to validate processes prior to moving them into actual production. One of the steps we've taken is to require a user ID & password. We are able to login fine, but after a page or 2 we are challenged again for the user ID & password. My develope...more >>

How to Change Connection Credentials
Posted by Ross Culver at 3/27/2008 9:16:53 AM
On our internal IIS server we have a SharePoint site as well as various other ASP.net sites. One site is used for ClickOnce deployment of a variety of Windows applications. Recently when trying to publish a ClickOnce app to the server, I was ultimately forced to use the server/administrato...more >>

Run IIS
Posted by Don Jones at 3/27/2008 8:31:02 AM
Is it possible to run the IIS services as a user other than the local system account? If so, what rights does the user need? Windows Server 2003 w/SP2 IIS 6.0 Thanks. ...more >>

Anonymous and integrated authentication for Web service
Posted by iamahulk at 3/26/2008 9:36:06 AM
Is it possible using IIS(version 6) to have both Anonymous and integrated authentication for a web service? By this I mean can it do intergrated authentication when the credentials exist, but if they don't allow an anonymous connection? (For a single URL) ...more >>

ftproot permissions
Posted by StevieD at 3/26/2008 3:16:04 AM
Our Setup: IIS 5.0 FTP site is pointing to the home directory of inetpub\ftproot. Within here, we have separate folders setup for each customer. The permissions on these folders are restricted to administrators and the local user account (customer account), which has read access. So when...more >>



(IIS) problems with virtual directory
Posted by Paulo Canavezi at 3/20/2008 12:39:20 PM
Good Afternoon! I am having problems with the display of files in a virtual directory. At my "server1" I created a logical mapping on IIS appoint to a image directory on "server2". At "server1" I can browser the files on "server2", but if I'm using Internet explorer, I got this error: ####...more >>

access issue
Posted by Greg M at 3/20/2008 9:04:02 AM
Last night, I updated an application running on IIS6 to use trusted logins. If the user go to \\servername\app all is fine and the app opens If the user goes to the ip address of the server then the app (i.e \\10.10.10.10\app), it prompts the user for a login (generic windows userna...more >>

Digest does not work when integraded is turned on. ONLY on non-AD machines.
Posted by Chris Auer at 3/20/2008 9:01:16 AM
When I turn on digest and Integraded then log in on a machine that is in my domain (not using domain name) it works fine. This works in FF and IE 6 & 7. But when I do the same thing from a machine that is not in my domain in a remote location Digest fails. I have to include my domain name for it...more >>

Integrated Windows Authentication
Posted by vx at 3/20/2008 12:15:00 AM
The user and the server running IIS are members of, or are trusted by, the same domain. And IIS configed to use Integrated Windows Authentication. Does Internet Explorer prompt the user for credentials (user name and password) ,and use NTLM Authentication, When user access the website usin...more >>

Getting up to speed on NTLMv2 programming ASAP?
Posted by PeteOlcott at 3/18/2008 10:33:21 AM
What is the fastest way to get up to speed on NTLPv2 programming in either Visual C++ or Managed C++?...more >>

Discovering filenames when 'Directory browsing' disabled
Posted by Sean S at 3/17/2008 7:44:00 PM
Hi all, How hard (or easy) is it for a site visitor to discover the filenames of files in directory that has 'Directory browsing' disabled? I have a contractor who is planning to do this with some files on our site and need some advice. Sean....more >>

Permissions on website folders
Posted by Jeff at 3/17/2008 6:46:01 AM
Hello, I have my webpages in a folder called "company.com" under Inetpub/wwwroot. I'm having some trouble configuring the permissions on the folder. Does everyone need atleast read access to this folder in order to access the website? I took the read permissions off for everyone and users st...more >>

Problem with https and IE (and safari) on Mac os
Posted by Harsh Trivedi at 3/17/2008 5:31:19 AM
Hi, I have configured SSL to my site, and I am able to open it Ok on Win based browser, but not on MAC system. ----------------------------------- My Site Developed in ASP.NET 2.0, and ported on IIS 6.0. ----------------------------------- I got this error, "Cannot find server or DNS Erro...more >>

Renamed AD user accounts and Integrated Windows authentication in IIS 6.0?
Posted by Usenet User at 3/14/2008 8:30:36 PM
Here is the issue: some user accounts were renamed in our Windows 2003-based Active Directory. These users successfully log in with their new user IDs into the domain. However, when they try to access our IIS 6.0-based ASP.NET applications that use Integrated Windows Authentication, the IIS stil...more >>

source of Failure Audits is Default Web Site
Posted by G at 3/14/2008 2:26:39 PM
I've inherited an apparently unmaintained environment. I notice that about half of my Security events on my domain controller SVR2 are: Event Type: Failure Audit Event Source: Security Event Category: Account Logon Event ID: 680 Date: 3/14/2008 Time: 1:44:25 PM User: NT AUTHORITY\SYSTEM ...more >>

Problem after setting password policy
Posted by Bob at 3/14/2008 12:18:36 PM
Hi All, I recently changed the password policy on our server by going to "administrative tools" -> "domain security policy" I have now enabled "password must meet complexity requirements". If I set a users account to "user must change password at next logon" then the use is able to chan...more >>

Installing a renewed SSL certificate without creating a new key pair
Posted by Saqib Ali at 3/14/2008 10:00:09 AM
Hello, How can I install a "renewed" SSL certificate on a IIS server without going through the process of regeneration of the key pair? saqib http://doctrina.wordpress.com/...more >>

How Add specific extention in Mime Type in IIS 6.0
Posted by Dima at 3/13/2008 6:16:01 AM
Hi anybody! I need help in IIS 6.0, i have application wich called MATHEMATICA 4.0 and extentions of files is called .nb , i am trying to add in IIS 6.0 in Mime Type this kind of extention but i don't know what type of Mime Type to write? Thanks a lot...more >>

IIS Kerberos Authentication issue;
Posted by alwynpereira@gmail.com at 3/13/2008 6:00:06 AM
Hello I have two web applications running in different app pools. First one [WA1] runs in the default pool [P1-LocalService], and the other [WA2] in a seperate pool [P2] with identify of a domain account: DA1. Window integrated authentication is enabled for both; I access the url using h...more >>

IIS7 Directory Browsing
Posted by Jurjen de Groot at 3/10/2008 5:49:49 PM
It's probably a simple question for you Vista / IIS7 users out there. I'd like to enable Directory Browsing (and possibly Static content) on my dev-box, it's just for development on my local machine but I can't figure how to do it, IIS7 user interface is quite different from IIS6 and I can't ...more >>

CSR - Won't process pending request
Posted by rileymartin at 3/10/2008 3:35:01 PM
Hi, I'm migrating Exchange to new hardware and after generating a new CSR and downloading our new cert, it won't process. I generated the request using the IIS MMC and I'm trying to process the pending request also in IIS. When I browse to the cert file and click it says the followin...more >>

both Windows and Custom Authentication for Web Services
Posted by Daniel P. at 3/10/2008 10:59:03 AM
I expose a collection of services using Win 2003 server and web services. I need to support both Windows authentication for internal user and custom for outside users. I configure IIS to use both Anonymous access and Integrated Windows authentication. WSLogon logon = new WSLogon(); logo...more >>

how to place the website in a windows 2003 network
Posted by airandclouds at 3/6/2008 12:18:56 AM
hi all i have been trying to setup a website developed using ASP.Net at client machine in Windows Server 2003 NEtwork. Now i want to use it as intranet but getting lot of problems. From http://www.developmentnow.com/g/91_2007_1_0_0_0/inetserver-iis-security.htm Posted via DevelopmentNow.com Group...more >>

login for 127.0.0.1
Posted by skynet at 3/5/2008 12:38:58 PM
I've Windows XP Pro and IIS installed. When I type http://127.0.0.1 in the address balk of IE, a login + password is asked. Which login + password I have to use? In the configuration of IIS, 'anonymous access' is activated (even if I de-activate 'anonymous access', it doesn't work). When I...more >>

Integrated Authentication - Manual Authentication Popup
Posted by Chris Hoare at 3/5/2008 3:07:12 AM
Hello, I have a strange intermittant problem. There are two web servers configured to load ballance behind an F5 load ballancer. Each of the web servers has a .Net application running in IIS 6 on Windows 2003. The site is setup to use integrated authentication only and domain users are ...more >>

Server certificate - CSR generation
Posted by E. Kwong at 3/4/2008 4:06:02 PM
Currently we have a cert in place for our web server (Win 2003 IIS 6). But about a month from now we are going to change our web address / URL. Is it possible to generate a CSR for the new URL and submit to the CA in advance? My impression is that the current cert has to be removed first...more >>

Basic security question
Posted by LP at 3/4/2008 9:39:40 AM
Hi there, I'm going to be using (anonymous) impersonation on my web site so everything will run under IUSR. I'm a little confused about what end-users will be able to do versus my app itself however. For instance, if I create a read-only folder, my app (running under IUSR) can read it witho...more >>

Each HTTP object being requested twice (401 then 200 responses)
Posted by benny.hauk@gmail.com at 3/3/2008 7:42:08 AM
I'm running a .NET 1.1 app on IIS6 with keep-alives and Session state enabled. Directory Security is set to only allow "Integrated Windows Authentication" and the web.config authentication setting is "windows". The web pages load fine and the client is correctly passing the current user's cred...more >>


DevelopmentNow Blog