IIS Security - Week 13, 2006

Simple Anonymous Access question

rolfejr - 31 Mar 2006 10:39 PM - 3 messages

I accidentally posted the following message in the ASP newsgroup, so I thought I would post it here as it probably belongs in this group instead. I have what I think is a simple question but I am finding nothing but ...

Iusr_Servername NetworkPrinter

Lye - 31 Mar 2006 3:52 PM - 6 messages

Hi, any expert out there can advise on how to allow the iusr_servername to access a network printer? I have try the solution posted on KB to edit the hkey_users/.default..... setting, no luck. Please help..... I need the isur_servername to print to a printer link to a PC printserver. I have set up ...

Communicator Web Access Authentication Not Working

Ben - 31 Mar 2006 12:32 PM - 5 messages

Hi, I'm trying to setup Communicator Web Access (CWA) on a server that is already running Live Comms 2005, Exchange 2003 & OWA. I have done a test install on a VMWare machine, got it up and running successfully. However now ...

Do I really need a wild card certificate ?

Mike_IntermediateVB - 31 Mar 2006 12:42 AM - 8 messages

I am trying to set up a virtual directory that uses SSL (at the moment it just contains index.htm). Once all the various settings are set I can navigate to this page from within my network (but external sites produce a ...

BIN Directory being hidden automatically

T-1000 - 30 Mar 2006 11:13 PM - 6 messages

For some reason all of the BIN folder in any IIS virtual servers are being hidden automatically. I don't mean hidden from the .net application, but simply hidden. They are visible only via FTP or command prompt, but not explorer (regardless of folder options.) ...

Restricting IIS from serving static content

Nico - 30 Mar 2006 9:57 PM - 7 messages

I'm trying to determine the best way to restrict access to static files in IIS6.0. From my understanding the recommended solution is to remove the extension from the MIME types in the IIS6.0 console. However testing has ...

IIS and enterpise sub CA on different machines

Edward Ray - 30 Mar 2006 8:50 PM - 3 messages

The Brain Komar texts implies that the enterprise subordinate CA (i.e. issuing CA) needs to reside on the same machine as IIS. From a security perspective, this seems like a poor design. From a network standpoint, it ...

Current User Credential Security settings don't seem to allow access when they should.

D Witherspoon - 30 Mar 2006 4:23 PM - 2 messages

IIS 6 Win2K3. I created a new virtual folder. That points to \\fileshare\myfolder. the virtual folder is set to use integrated windows authentication and the "connect as" is set to "Always use the authenticated user's credentials when ...

Err:The server certificate for instance '4' has expired or is not

vecozo@online.nospam - 30 Mar 2006 11:22 AM - 2 messages

Hello, We have three environments test, acceptance and production. On the test and production environment everything works fine, but acceptance is something different. So you should say make acceptance the same as test and production. So I did but it still doesn't work. ...

run cgi in localhost without SSL?

jdinares - 30 Mar 2006 11:05 AM - 4 messages

hi, sorry by my bad english in advance. Configured server with IIS 6 and one Certificate SSL in default web. All run ok. I need one .cgi of this web to run locally without SSL : Configured additional virtual web in the server for access locally without ...

Website unable to download *.exe's

Brian - 29 Mar 2006 9:09 PM - 2 messages

I have a webiste where the web master would like to have others download exe off the site. Righth now when I try to click on the link it will not download the file. If I chage it to a zip file it works just fine... ...

IIS Version and Interanl IP being Revealed

DoktorWho - 28 Mar 2006 7:20 PM - 6 messages

During a recent security scan of our IIS 6 box, it was shown that the II Version, 6 in this case, and the Internal IP address of the box were being shown externally. Why would this be and how can I fix this. ...

Anonymous Account not working

Ishmealm - 28 Mar 2006 3:27 PM - 5 messages

Hi, I recently built a new webserver to replace an existing server. I copied the data to the new server and rebuilt all of the IIS directories by hand. I replaced the broken SID of the old IUSR account on all of the ...

IIS 5 allows anonymous editing via Frontpage

Tim100873 - 28 Mar 2006 1:12 AM - 6 messages

Greetings, We are running IIS 5, and have run the lockdown tool (2.1) using the FPEx template. We have noticed that anyone that opens the website inside Frontpage can edit the contents of all websites on this server without being ...

Passing form credentials to windows security

Doug - 27 Mar 2006 8:23 PM - 4 messages

Ok to explain my scenario here is my goal I have an intranet site that is available internally as well as externally. Currently it is just html files on the intranet (that change may come later which will make it easy to secure via an application, unfortunately right now ...

IIS6 'forgets' "Connect As" password for Virtual Directory

Richard Manion - 27 Mar 2006 6:55 PM - 7 messages

I have a website that contains a virtual directory mapped to a UNC using a domain account under "Connect As." Users are normally able to browse the virtual directory without incident. The site exist on an NLB cluster. Occasionally, one or two of the servers will forget the "Connect As" ...

Cannot connect to Web Server from Different Domain

nai - 27 Mar 2006 10:14 AM - 4 messages

Hi all, We have two domains in here and are currently migrating users from Domain A to Domain B. We have a trust relationship setup between the two and are using Windows Integrated Security for Authentication. My IIS Server is in Domain A. ...