IIS Security - Week 29, 2006

iis problems with some xp clients - kerberos issue?

mahalie - 22 Jul 2006 12:06 AM - 6 messages

I'm the web dev for a 200 person company, everything herein is in our corporate domain. We use Kerberos authentication - the domain controler is a win2k server. In short I have an Intranet server (win2k) hosting a .net 2 application ...

IIS 5.0 vs IIS 6.0

Antero - 21 Jul 2006 9:21 PM - 4 messages

Greetings, I have an asp page that allows me to start and stop services on my windows 2000 server and run some batch files as well. Now that we are upgrading to windows 2003 this page is not working. I have changed the security parameters ...

++ IIS + SQL (Not enough storage is available to complete this operation)

tolgay - 21 Jul 2006 10:34 AM - 4 messages

Sometimes we got an error (Not enough storage is available to complete this operation) from one of our servers which on win2000 sp 4 iis5.0 (all hotfix installed) sql server sp4. mdac 2.81. It occures random and we could not ...

HTTP 405: The HTTP verb used to access this page is not allowed

bvlmv - 19 Jul 2006 9:34 PM - 4 messages

Hi I started to get this error after I inserted tables into my index.htm page. I have a small form (username/password) that runs to a small .asp page which then redirect based on information provided. I read a couple of post regarding this situation and it talks about ...

IIS + SQL (Not enough storage is available to complete this operation)

tolgay - 19 Jul 2006 3:26 PM - 7 messages

Sometimes we got an error (Not enough storage is available to complete this operation) from one of our servers which on win2000 sp 4 iis5.0 (all hotfix installed) sql server sp4. mdac 2.81. It occures random and we could not ...

- How to setup AD authentication when IIS in in the DMZ?

Dan - 19 Jul 2006 2:06 PM - 2 messages

I need to be able to access AD to authenticate users coming to a .NET application running on an IIS which is in the DMZ... Here are the details: My .NET app resides on a Win 2003 Server with IIS6 in the DMZ of the ...

Integrated Windows Authentication results in -2146893052 (0x80090304)

mmichaels - 19 Jul 2006 6:39 AM - 4 messages

I have a website on Windows 2000 server with only IWA enabled. I can log into the site just fine, but if I type a bad password I get an HTTP 500 error. I can't figure out why I'm not reprompted for the password ...

Microsoft URL Scan

Brad Baker - 19 Jul 2006 12:25 AM - 5 messages

Our web servers run IIS5 and we also make use of the Microsoft URL Scan utility: ([link]). By default Microsoft's URL scan utility blocks a number HTTP Methods including "HEAD". We have a number of clients concerned that blocking the ...

suppressing http banner in IIS 6.0

DD - 18 Jul 2006 8:01 PM - 3 messages

I know you can suppress the ftp banner in IIS 6.0 - but how do you suppress the http banner from displaying the web version? I was able to do it back in IIS 5, but it no longer works in IIS 6.0 (W2K3 SP1). ...

IIS default file permissions used improperly?

CyrexCore2k - 18 Jul 2006 6:32 PM - 5 messages

This applies to IIS 6.0 with all current service packs at the time of this post. If you set the file permissions for any default page in a directory they will be overridden by directory permissions if the web request does not ...

SSL's and NLB

Jose - 17 Jul 2006 7:04 PM - 2 messages

Folks, I have 3 url's webmail.a.com, webmail.b.com and webmail.c.com pointing to a single public IP. I also have 2 OWA FE servers doing NLB with a single default website. We would like to purchase an SSL from Thawte ...

certificate not saved after reboot

kenl - 17 Jul 2006 3:38 PM - 3 messages

When user installs certificate, he is able to access the secure website. But after he reboots, the certificate is no longer present. What can i do or look for to resolve this? Your help is much appreciated. Ken ...

Pass though authenticateion

l3msip - 17 Jul 2006 9:28 AM - 5 messages

Hi, My Setup Server A is a W2003 server provinding sharepoint services. Using ssl 128 bit ssl. Server B is my mail server providing 128bit ssl owa. When Uses connect (externally) to server a they logon as expected but if they ...

SSL warning message for Intranet site

l3msip - 17 Jul 2006 9:19 AM - 3 messages

Hi, I have an intranet site that is set up using ssl 128bit encryption (using my own certificate server- windows 2003 server (so thats iis 6.0) The name i used set for the 'issued to' part is its fqdn ...