Security Newsgroups: IIS Security

RevocationFreshnessTime and RevocationURLRetrievalTimeout ??

Yogz - 15 Sep 2006 3:36 PM - 1 message

Hi, can somone help me with thos variables ? : - CertCheckMode - RevocationFreshnessTime - RevocationURLRetrievalTimeout I would like to know if I can configure IIS6 with those variables in order to ignore the CRL revocation date and set a new one. I mean, even if my CRL has a revocation date of +7 days. ...

SPN for SSL over common name

Daniel - 15 Sep 2006 3:00 AM - 5 messages

Dear all, I've created an alias (CName) in DNS for my web server running on IIS 6.0. Web Server FQDN : myweb.domain.com (not using host header) Alias for Web Server : kirk.domain.com ...

error message

hoss - 15 Sep 2006 1:05 AM - 10 messages

i do have web application on my local machine and when i run the application i get in the default page which is that the main page and after that i getting error message saying that INVALID URL ACCESS but ...

Security options for IIS6, SQL2005

DaveA - 14 Sep 2006 9:45 PM - 2 messages

Hi I've built a .NET application server running SQL 2005 and the default version of IIS on Server 2003, that's IIS6, correct? Would be able to tell me if Server SP1's Security Configuration Wizard is also compatible with this ...

Can't save password if Integrated Authentication is used

smith777 - 14 Sep 2006 8:12 PM - 5 messages

I'm running Windows 2003 sp1 and have Sharepoint running. I have Integrated Authentication turned on. If i go to the web site and enter in domain\username and password and check off 'remember password', i'll initally log into the site fine for the first time. If i close the browser ...

WebDAV HTTPS transfer

DK1088 - 14 Sep 2006 6:18 PM - 1 message

Has anyone had any legitimate success with automating HTTPS transfer for files using WebDAV? ([link]) I can manually transfer files quite easily...but when trying to batch file transfer or automate it in some way so that it is pretty seamless to the end-user, it ...

Block IP by "Group Of Computers"

DBLWizard - 14 Sep 2006 1:27 PM - 2 messages

Hello, I am having problems with certain companies that are "scraping" data from websites and I want to block the IP ranges owned by those companies. How do you figure out what the subnet mask to block a range ...

Verisign Certificate

christy - 13 Sep 2006 11:01 PM - 2 messages

We bought and installed "True 128-Bit SSL Certificates" package from Verisign on our IIS server. We currently use it for our webstore. Our contractor is developing another webstore (as addition to the exiting one) for us. They're developing the store at their site. ...

ftp server access

msw - 13 Sep 2006 9:50 PM - 2 messages

Can anyone tell me what configuration I need to do on IIS 6 Windows 2003 server to be able to access the server as well as to access through a ftp tools as well as dreamweaver MX Thank you ...

IIS 6.0 Bug?

Morten Wennevik - 13 Sep 2006 10:33 AM - 6 messages

Hi, I apologize for the extensive cross-posting but I'm getting desparate. We have a web page calling one or another web service. Both web service communicate with Sharepoint 2003, and both temporarily change impersonation using WindowsImpersonationContext class and then revert back with ...

HTTP Error 401.3 - Unauthorized: Access is denied due to an ACL set on the requested resource

ashtek - 13 Sep 2006 10:28 AM - 5 messages

Hi, I have a web application hosted on a Win2K3 server. This is the Default Web Site on the server (I have right cliked on Default Web Site and pointed to a directory within the server). So users can access the application by typing http://servername. ...

Page 1 works, Page2 wants login credentials

EricT. - 12 Sep 2006 7:26 PM - 1 message

I have got this weird problem where an ASP.NET app works fine on the first page, but when I follow a link to any of the other 4 pages, it asks for Username/password/domain. If I don't supply it, the still page comes up, and ...

TechNet Webcast: grow your IT org into a dynamic infrastructure

Core Infrastructure Optimization - 12 Sep 2006 6:01 PM - 1 message

TechNet Webcast Series: Agility Now Tune into a special webcast series detailing steps on how you can grow your IT organization into a more flexible and integrated system. As IT organizations have become more geographically dispersed and individual roles ...

IIS 6, Windows Authentication and Terminal Server

Loki - 12 Sep 2006 10:18 AM - 1 message

Hi, Been searching this forum and found the same question before, but no straight answer on how to solve the following problem: When accessing a website on IIS6 (Windows Authentication only) through a Terminal Server session I will always get prompted to log on to the ...

IIS Hosting Webservice which accesses a COM server

Aidan Lawless - 12 Sep 2006 9:51 AM - 2 messages

Hi, I have an XML web service which exports a method that allows consumers of the service to update a backend system using an out of process com server. The only way I can get this to work is to set the Anonymous access user to ...

SSL and XML

tolgay - 11 Sep 2006 12:33 PM - 2 messages

Recently our web service provider changed its web site platform HTTP to HTTPS and before we got some data from the internet site with our web service( XML ) affter the changes somehow our code doesn't work. When we ...

file protection

beachboy - 11 Sep 2006 4:59 AM - 6 messages

any setting can protect the special folder that not allow user to download from browser/url, but the files/directories can access by aspx/asp script(Content Management System), how i can setup this up? use NTFS permission or IIS can do this?? ...