IIS Security

Does anyone know the pros & cons of having public servers in a workgroup vs in a domain? My situation is I have a couple Win2003 IIS servers, a SQL server, and a document mgmt server (SQL + doc storage) that's also an Active ...

Hello All, i was wondering if there exists some way to disable all system stored procedures, as they are vulnerable to attacks specially if they r not needed within any of my applications. something like, xp_cmdshell may cause attacks. i need ur help plz and will appreciate ur response and suggestions ...

Is there a way for a non admin to run the IIS 6 admin snap in tool?  We would like for our web admin to continue administering IIS, but because of AD policies, he is pulled out of the local admin group and can't connect to IIS. ...

We have applied a "test" certificate on a production server, and now the certificate has expired.  We have install the MS CA on a domain controller and want to request a new certificate from that CA.  However, the certificate ...

Hello All, i was wondering what is the main difference between the windows authentication and mixed mode authentication?? according to security recommendations, we should enable windows authentication, rather than mixed one, i don get the point why do we refuse the mixed mode authentication, although it includes windows ...

Interesting issue with a site that uses SSL and IIS 5.0.  All of a sudden today, we couldn't browse to the site using SSL.  All attempts simply timeout.  Nothing in the logs.  Take SSL off of the site and it works fine. ...

I am looking at setting up an external facing FTP server. Are there any guides on how to secure on FTP using IIS 6? Or are there better solutions? ...

I'm getting ready to secure my Outlook Web Access 2003 with SSL. The web server is running Windows 2000 (IIS 5.0), and the Certificate Server is on the Exchange server (Win2003). I've set up a test folder, created a ...

I've asked before without success but: How do you protect streaming video (.wmv) from being stored (saved as a file) I have to make hundreds of teaching aids via streaming video (from my pc) and i would obviously like to prevent end user from stealing them all ...

is it possible to test your own web service from the host machine? first time i set up a web service i couldn't access it via web browser and i tried lots of things, thinking it wasn't working - but when i tried it from ...