IIS Security

Hi, Do I have to use URLScan or IIS lockdown on my W2k3 IIS 6? I would also appreciate if there are links available that I can read to secure my IIS. Thanks TagaR ...

Hi, We are running a windows 2003 domain (2003 functional level). We have IIS running on a seperate box that has a website that we do not want everyone to be able toaccess without a username and password. We have enabled Integrated ...

Hi All, My IIS 5.0 server(Win2k sp4) crashes at regular interval of time daily once. for example everyday by 1.00 am my webserver crashes and it restarts automactically after 5 mins for past one week. I have stopped the antivirus, ...

I'm trying to get my Webserver to talk to my SQL Server and allow Trusted Connections. If my SQL server and Web Server are on the same box I can get it to work. There needs to be a User on the SQL Server that in running the Web ...

I recently upgraded a 200 server to 2003, thus upgrading IIS to version 6.  I am running OWA using a re-direct to HTTPS, and want to know if I should be using the IIS Lockdown tool.  I think I read an article that it should be ...

Hi All, recently one of my clients sites underwent a security audit. One of the issues they returned was that IIS sample script pages were accesable from the site([link]). My hosting company ...

Hi everyone, I have developed an ASP.NET web application.  Our development environment is: IIS 5 running on Windows 2000 Windows 2000 domain controller Integrated Windows Authentication enabled Anonymous Access disabled Allows all domain users in web.config When I deployed it to the staging environment with the configuration ...

Hi, I recently set up an IIS6 box on a Windows Server 2003 domain controller to take advantage of the new advanced digest that doesn't need reversible encryption enabled passwords. I enabled UseDIGESTSSP in the Metabase, and Digest works... Almost! ...

Test Server - Win 2003 SP1 Clean Install Need to turn on Subauthentication for webapps connecting to Win2k SP4 Dom Controllers. From IIS6 help to turn on step 1 = command prompt rundll32 c:\windows\system32\iisuba.dll,RegisterIISUBA I get "Error loading c:\windows\system32\iisuba.dll" ...

Hi, I have AAA site (not default web site) in IIS 6 on Windows 2003 Server. The AAA site uses Windows Integrated authentication. I have a problem of accessing the AAA site using DNS or FQDN name from other Windows 2003 Servers in the same domain - i have been prompted to enter user ...

Does anyone know if it is possible to force a browser to cache images under SSL? (perhaps using a specific http cache header) I tried putting all images on http but MSIE complains with a prompt about secure and insecure items (which I presume is the default) and this would be ...

Hello, I am in the process of implementing SSL for our companies' Web site. We have a digital certificate installed on a W2K box running IIS 5.0. When I first access the Web site over HTTPS, the response is immediate ...