IIS Security - Week 25, 2006

security error in IIS logs (401.2 error)

Alexander Ferrugia - 24 Jun 2006 12:23 AM - 6 messages

Hi: I'm trying to deploy my VisualStudio2003 ASP.NET application on Windows Server 2003 w/ SP-1. When I navigate to my site (locally or from another network computer) in Internet Explorer I'm being prompting for a network ...

New HTTPS web site and certificate installation

instrument_programmer - 23 Jun 2006 6:34 PM - 3 messages

While I am a very experienced developer I am new to the whole IIS secure server stuff. We had created a locally generated "test" cerrificate and installed it and it works with that. But we wanted to expose this outside ...

file security/authentication

Carl Hilton - 23 Jun 2006 6:10 PM - 4 messages

OK, I thought I had tackled this before a while a ago but forgot what I did... I am running IIS6 on a W2K3 server. for most of my site I have Anonymous access authorized. I have one file that I want to use the local system ACLs ...

Keeping a particular intruder out

Peter - 23 Jun 2006 2:35 PM - 5 messages

If this is OT, then I apologise. I'm running 2003 Standard, basically to host my wife's hobby sites. I monitor the logs for intrusion attempts, and persistent offenders get barred using a simple IPSEC implementation. However, I cannot stop a plague of visits from msnbot/0.9 supposedly ...

Security Tab Missing On Specific File Extensions - 2003

Chase D - 23 Jun 2006 3:26 AM - 2 messages

Okay so I am on a windows 2003 server. I first found that these certain types of files (.wpd) Corel files could not be downloaded from the web. I first thought it was a security issue so I right clicked the files and was going to ...

II6.0 ISAPI & MIME types

Ibrahim. - 22 Jun 2006 12:49 PM - 9 messages

Hello, following are my questions with regard to ASP.NET 2.0, II6.0 & Win2003 server running a Internet Application.; 1. What is the difference between MIME types & ISAPI filter. 2. How can I restrict a file (*.pdf) from being accessed directly from the ...

Stop HTTP Access

Thom Little - 22 Jun 2006 10:32 AM - 3 messages

I have an ASP.NET 1.1 application on a Windows 2000 Server that can be accessed as ... [link] or https://name.tld . How can I force it to disallow the http access and only permit the https ...

MS Incident Response Plan

softtrain - 20 Jun 2006 10:21 PM - 3 messages

According to a white paper entitled MS Incident Response Plan, MS states that you should never load IIS on a domain controller. Does anyone have any experience with a fully updated windows 2003 server and a fully updated IIS ...

What encryption method and strength is the password in the metabas

Harold Miles - 20 Jun 2006 3:20 PM - 2 messages

Does anyone know the method and strength IIS encrypts the anonymousUserName password in the metabase.xml? Thanks! ...

How can make HTTPS secure connection to only IIS virtual directory & Few files under that virtual di

jayanth.vishnuvardhan - 20 Jun 2006 2:31 PM - 2 messages

Hi, How are you all? I need information regarding SSL using IIS5.0 Server. I got the CA certificate and i want to setup the SSL connection to my Virtual Directory. Please note that if i assign this certificate to the Web ...

Mirror ftp sites and user accounts in IIS

Matt_UK - 20 Jun 2006 11:58 AM - 2 messages

Hi We have 2 ftp servers in seperate DMZs in different parts of the country both running W2003 Server and IIS running with users isolated using local accounts and individual ftp sites - has to be this way due to the nature of ...

Securing static files

Jon Haakon Ariansen - 20 Jun 2006 10:12 AM - 3 messages

Hi, In short my problem is securing static pages, so that unauthorized (anonymous) people doesn't get access to these files. You'll find a detailed description below. I have a websolution that is made in Dotnet 2.0. The solution send the user ...

IIS WebDAV Long Filename Support?

bradwiseathome - 19 Jun 2006 5:40 PM - 2 messages

I am trying to use the Novell NetDrive freeware to connect to an IIS 6.0 WebDAV directory. I tried to copy a file to the server, and got an "error" saying that the server did not support long file names. Is ...

Windows Server Hardeing

Eng.Rana - 19 Jun 2006 8:33 AM - 2 messages

Hi all, I was wondering why do we need to harden Windows server 2003 by applying rules like: 1.Remove any unneeded Services 2.Close unneeded ports 3.Rename Administrator account 4.Prevent users from installing printer drivers 5.Restrict CD-ROM and floppy access to locally logged-on user only ...

IIS and client certificate

spiazzi67 - 18 Jun 2006 8:04 AM - 2 messages

Hi, I have SBS2003. I would expose exchange web in internert and intranet. For intranet I would secure with IP filter. For internet I would secure witch client certificate. Now can I combine this methods? That is a person in my intranet that ...

SSL using Microsofts CA

Jeniffer K - 18 Jun 2006 7:20 AM - 2 messages

I would like to configure SSL for OWA as well as for Outlook clients using RPC-over-HTTP, so i installed Certificate Services (in Add/Remove windows components), then in IIS I went to the default web site, under server ...