IIS Security - Week 7, 2006

SP2 Security

Rob - 18 Feb 2006 1:29 PM - 4 messages

This is really driving me nuts. I have a local website on my PC that I use to run certain bits of software for my company. For example, a tutorial MPG file: Pre-SP2 (IE 6 and FF): Open http://localhost/ ...

Keep having to reset security for .NET

sysadmin guy - 17 Feb 2006 6:51 PM - 2 messages

I have to reset the security permissions for the C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322 folder on one of my web servers frequently. The machine\aspnet accounts keeps disappearing from the security permission. Iâ€™ve even rerun aspnet_regiis a few times but nothing seems to ...

Perl File

Kory - 17 Feb 2006 4:53 PM - 8 messages

Hello! I have a website running on IIS 6.0. The website points to some perl files for submissions. The perl files are located in cgi-bin directory. Here is the problem. When I click on request button, the ...

SSL x site NOT in Port 80

max - 17 Feb 2006 2:56 PM - 5 messages

Hello there, How can I install an SSL service for a Web Site on port 81? That is, I have two sites on my server, so same IP but port 80 and 81. I want a subdir of site in 81 under https. ...

WEB Services don't respond

Miha - 17 Feb 2006 11:41 AM - 3 messages

From time to time we don't get any response from IIS on our 'stand alone' Win2003 Web Server, which is running WEB services. It's strange because there are no errors or other problems, web services just don't respond, so ...

Locking down IIS on Windows 2003 Domain Controller

Desparate Dan - 17 Feb 2006 10:34 AM - 3 messages

Hi Gurus Can anyone advise on the steps needed to safely lock down IIS on a Windows 2003 donain controller. I know IIS lockdown is not needed on Windows 2003 IIS and I know I need to still run URLScan 2.5 but I was wondering if there are any other best ...

Getting rid of annoying users!

rob_illing - 17 Feb 2006 10:22 AM - 3 messages

I've got a problem! My web-game ([link]) is being plagued by a particularly annoying user. He creates multiple accounts and uses them to harass other players. Each time I ban one of ...

forcing browsers to SSL

titanic panic - 17 Feb 2006 3:23 AM - 3 messages

Hi, I'd like to setup IIS so that when users go to the urls: [link] [link] [link] it automatically forces them to SSL, i.e.: https://[link] ...

multiple stop and starts of Active Server Pages

João Condeço - 17 Feb 2006 12:27 AM - 2 messages

Hi, The Application Log of Eventviewer has multiple messages about Active Server Pages stopping and starting. The stop messages are as follows: Source: Active Server Pages Event ID: 4 Description: Service stopped. The start messages are as follows: Source: Active Server Pages ...

IIS Issues

Kory - 16 Feb 2006 8:09 PM - 3 messages

I have a SBS 2003 running IIS 6.0. Website is running fine. In a website I have a section where I can fill out blanks and hit submit and all info is emailed to me. The file that is called on submit is:"FormMail.pl". ...

Mutiple SSL Sites [one] IP

Mr. Backup - 16 Feb 2006 4:38 PM - 7 messages

Multiple SSL Sites [one] IP I am looking into a method of hosting multiple SSL Enabled CMS Type Sites (I.E. Mambo Server for example or even PHPBB, for all whom may wonder). The issue is this; I am under [one] public IP Address. Although IIS will allow ...

HTTP and HTTPS sites on same physical server?

flynch - 16 Feb 2006 2:29 PM - 3 messages

Hi All, Looking for advice on the advisability of putting HTTP and HTTPS sites on same physical server where the certificate is associated. Obviously HTTPS addresses transfer of data rather than site/server security however it wold be great to get an authoritative view on this. ...

disabling source code access

DCPUser - 14 Feb 2006 8:46 PM - 3 messages

I havea funky problem here. We have users, through MS Visual Studio, who are able to browse and read source codes of web apps that were developed even though from the global settings (properties of Default WebSite) and even locally on the folders themselves (and service master properties) the "Script ...

SSL

janetb - 14 Feb 2006 6:54 PM - 3 messages

I have a site comprised most of asp pages with ss includes for the headers, footers, etc. I have a Verisign ceritficate installed. On the page requiring the certificate, a prompt is given saying some of the site is not ...

Problem with integrated IIS authentication on XP

Tim Gorgs - 13 Feb 2006 4:58 PM - 5 messages

Hi all, I have the following constellation: Windows 2003 Server with IIS and integrated windows authentication as the only authentication method When I request a page like [link], it works fine with a Windows 2000 client (on the server I can log the requesting ...

integrated windows authentication on IIS and SQL Server

Volkan - 13 Feb 2006 4:11 PM - 2 messages

I discovered that our web site, hosted on IIS 6.0, has both anonymous and integrated windows authentication on different folders (have no idea why...), when I try to just have the whole site set to Windows auth and disable ...

IIS authentication on a RADIUS

Kailash - 13 Feb 2006 1:46 PM - 2 messages

Hi! Just wondering if anyone managed to set up HTTP or HTTPS authentication on a RADIUS server on an IIS server. I read that there is a software (Radiis) that can do it but I was hoping that someone managed to do it by other ...

Alternative Domain

Richard Mabbitt - 13 Feb 2006 11:25 AM - 3 messages

Hi We maintain our own web site [link] We wish to access Analysis Services on another server - not the web server - called blade I have been able to allow access to cubes using Pivot Table Services in ...