Psst! Did you know DevelopmentNow is a mobile web site design agency?

Contact us for help mobilizing your site, or to sign up for our beta Mobile Web SDK!


Archived Months
June 2003
July 2003
August 2003
September 2003
October 2003
November 2003
December 2003
January 2004
February 2004
March 2004
April 2004
May 2004
June 2004
July 2004
August 2004
September 2004
October 2004
November 2004
December 2004
January 2005
February 2005
March 2005
April 2005
May 2005
June 2005
July 2005
August 2005
September 2005
October 2005
November 2005
December 2005
January 2006
February 2006
March 2006
April 2006
May 2006
June 2006
July 2006
August 2006
September 2006
October 2006
November 2006
December 2006
January 2007
February 2007
March 2007
April 2007
May 2007
June 2007
July 2007
August 2007
September 2007
October 2007
November 2007
December 2007
January 2008
February 2008
March 2008
April 2008
May 2008
June 2008


all groups > iis security > june 2008

FTP access issues
Posted by nandagopalrvarma at 6/22/2008 9:59:04 PM
Hi , I have a Windows Server 2003 R2 Enterprise box which is an ADC and runs SMS 2003 SP3 primary site, a FTP web site and ISA 2006 to protect the FTP as well provide Web Proxy services. My FTP site is running quite nicely though I've heard the above mentioned setup is not good and can cause l...more >>

Unwanted login request
Posted by Ben at 6/20/2008 1:05:53 PM
Problem: trying to move web sites to a second controller in my domain, and I'm getting unwanted request for authentication. Detail: when the IP address of the site is on the domain controller, I attempt to access it with IE. If I've set the site up in IIS, I see it, if I don't, I get a pag...more >>

Web server delivers wrong SSL certificate information
Posted by Jerry Hodson at 6/20/2008 7:18:00 AM
Completely befuddled here. Running IIS 6.0 on my web server for many years now and have never had any issues when replacing expiring certificate file with new ones, until now. When I hit the web site, the certificate that I can view is the old expired one. Not the new one that I replced it...more >>

SelfSSL IIS 6.0
Posted by S H A R I Q U E at 6/19/2008 12:03:02 PM
i have setup intranet website and encrypted its content using SelfSSL. Now, i want to enable external users outside the company to access this website using HTTPS. Is it possible to utilize SelfSSL for both intranet and extranet or do i need to purchase a certificate from VeriSign to encryp t...more >>

_stat from ISAPI Extension always returns FILE_NOT_FOUND
Posted by Jason Viers at 6/19/2008 11:27:03 AM
I have an IIS 6 ISAPI Extension that is set as a Wildcard Application Map. The virtual directory is set to Inegrated Authentication only so it impersonates the requesting user (which GetUserNameEx confirms). The IIS machine is trusted for delegation, and the extension uses WinHttp to access ...more >>

Kerberos Problem with App Pool running as Domain Account
Posted by VC at 6/19/2008 6:00:00 AM
Good Morning, I have multiple applications running with integrated security to connect to a SQL back-end database. Everything works fine on our production servers which use the default system accounts for the Application Pool. However, I had to change this to use a domain account because ...more >>

no access to a sharepoint website
Posted by NT at 6/18/2008 8:41:08 AM
hello I made a new intranet with sharepoint, but i cannot access it from my others branch office (on a GLOBALVPN) On the website, I only select integrated authentification After research i nearly sur that my firewall block the NTLM authentification, for example if i disconnect the firew...more >>

IIS 6 Cert Wizard - Copy Certificate Another Server - Access is De
Posted by Scott at 6/18/2008 6:30:02 AM
I'm trying to use IIS Cert Wizard to temporarily copy the wildcard certificate from a production web server to a dev web server and then install and apply the cert to the dev web server. When I specify the production web server's name and with userid and password having domain admin and enterp...more >>



IIS7: CreateProcessWithLogonW access denied
Posted by Kyle Alons at 6/17/2008 3:53:47 PM
Code like this in an ASP.NET web page (code behind .cs file) works in IIS prior to v7, but fails with access denied (5) on v7. Any ideas on a what permissions are required for this to work? Thanks. [StructLayout(LayoutKind.Sequential)] internal struct PROCESS_INFORMATION { ...more >>

physical directory on remote server
Posted by ravinder panchal at 6/17/2008 3:35:05 AM
hi all, we host a one web application in datacenter.we create a one virtual directory on iis and map it on directory reside on local drive .every thing is running fine but my management want that move the physical on remote server. i read the artical from one of the ms website and shift th...more >>

FTPS Clients with IIS7
Posted by BPF (Brian and Paul Fan) at 6/11/2008 9:52:37 AM
Hello: When will Microsoft's FTP.EXE and Internet Explorer support FTP over SSL (FTPS) as it is implemented in IIS7? Also, are there any other FTPS clients besides the following that anyone knows of? SmartFTP (www.smartftp.com) FileZilla (http://filezilla-project.org/) Moveit Freely (...more >>

IIS file/group permissions and multiple sites
Posted by E-Double at 6/10/2008 5:51:02 AM
On an Win2003/IIS 6 server hosting multipe sites, when file level permissions and groups are used to set the access control - is there some way to permit a person who is in one group with access permissions and that has already signed-in to one of the sites to access a second site on the same ...more >>

Very Strange Requests In My IIS Logs - Possible Hacker
Posted by Jim_H at 6/9/2008 9:33:01 AM
Hopefully this is an appropriate forum for this question. I am noticing some very strange activity on my web site over the last 3 or 4 days. My site is using IIS running on Windows Server 2003 and I am using .Net Framework 3.5 with SQL Server 2005 on backend. I cannot tell if what I’m see...more >>

How to set spn to use kerberos Authentication in IIS7 ?
Posted by vx at 6/8/2008 11:52:00 PM
How to set spn to use kerberos Authentication in IIS7 when site hostname is different to default computer netbios name,and username that runs application pool is different to network_service?...more >>

iis 5.1, internet explorer, cached credentials and kerberos
Posted by Brian Yuill at 6/6/2008 10:15:06 AM
We have a 5.1 web site set for 'Integrated Windows Authenticatioin' (only). In Internet Explorer 7.0, we have this site added to our list of local intranet sites and the User Authentication for that zone is set to 'Automatic logon only in intranet zone'. We also have 'Enable Integrated Window...more >>

How to renew ssl certificate
Posted by sekhar at 6/6/2008 4:57:01 AM
Hi, we have OWA configured in two servers (WNLB) - Windows 2k3 sp1 and Exchange2k3 sp2 Our OWA ssl is about to be expired, and we need to renew it. I have couple of doubts. - When I try to export, it says I cannot export the private key. Is this required while renewing? - Should I do th...more >>

Integrated Security fails using machine name, succeeds using FQN
Posted by Seth Petry-Johnson at 6/5/2008 1:02:04 PM
Active Directory: BAR.COM Webserver: FOOWEB, IIS 6, single static IP address, running a single ASP.NET website. Contains a virtual directory (called "/protected") with Integrated Security as the only authentication option. When logged in locally to FOOWEB, pointing IE to http://fooweb/pro...more >>

Automatically adding all extensions to MIME Type
Posted by Saqib Ali at 6/3/2008 2:59:08 PM
It is a terribly time consuming to add the MIME Type (Global Properties -> HTTP Headers TAB -> MIME Types) one by one. Is there way to automatically add MIME TYPE for "all" file extensions in a given dir +subdir on a server? Any help will be highly appreciated. Thanks saqib http://doctri...more >>

URLScan not blocking character is SQL injection
Posted by Keith at 6/3/2008 9:03:01 AM
We are running IIS5 with URLScan 2.5. In the URLScan logs the following is shown: [06-03-2008 - 07:19:56] Requests containing the following character sequences will be rejected: [06-03-2008 - 07:19:56] '..' [06-03-2008 - 07:19:56] './' [06-03-2008 - 07:19:56] '\' [06-03-2008 - 07:19:5...more >>

How do you force clients' SSL sessions to always connect at 128-bi
Posted by abenzaki at 6/3/2008 6:31:00 AM
How do you ensure that ensure that all SSL sessions connect to the an IIS 6.0 server at 128-bit strength? I'm trying to find out if there is a way to always force clients/end-users to securely communicate with my web servers at or above 128-bit SSL encryption...more >>

IIS 6.0 Error
Posted by Pradeep K at 6/3/2008 5:21:00 AM
In the MMC, when i click on the IIS I get a blank screen along with the error message "The path specified cannot be used at this time". I searched the net and found a fix is available as mentioned in the below link. http://support.microsoft.com/kb/946517/en-us Can you please let me know ho...more >>

How do you create client certificates?
Posted by Alastair at 6/3/2008 4:08:00 AM
Hi All, I am trying to publish a page via IIS/SSL, but do not know how to create client certificates for the site. I have a CA server and this has created a server certificate for the server where the website is. This all works ok apart from when I enable 'require client certificate' in II...more >>


DevelopmentNow Blog