IIS Security - Week 8, 2006

Post Image Data to Server from embedded user control in IE

VancouverMike - 24 Feb 2006 6:47 PM - 4 messages

Hi, I have a user control embedded into web browser(IE 6.0) for scanning image from a scanner. When the image is scanned, I want to upload this image to server side by using HttpPost class(a third party class, not from .NET ...

List of all SSL pages

Doug - 24 Feb 2006 5:52 PM - 3 messages

Hello! I'm trying to figure out if there's a way to determine what pages have been set for SSL on my site. The site consists of a couple of thousand pages (a university site) and we're developing a new site for launch in the ...

NT Authentication - 2nd challenge/response

P James - 24 Feb 2006 3:18 PM - 3 messages

Sorry, I posted this to the wrong group a few minutes ago. It belongs here... Hi, I have an IIS ASP website that requires a user to be authenticated on our domain to be let in. However, if a user is already authenticated on the ...

IIS 5 belonging to domain?

Vic - 24 Feb 2006 1:41 PM - 2 messages

What are the security risks with a webserver having one nic into the dmz on the firewall and the other nic into the production network, with the webserver belonging to the domain, but logged on locally at all times. I am assuming that in order to get it to retrieve the info from a msde ...

HTTP to HTTPS specified request cannot...from current Application

Les Bell - 24 Feb 2006 12:05 PM - 3 messages

I get this message in some browsers when I go to [link] which is meant to redirect to https://[link] "specified request cannot be executed from current Application Pool". I think there is an answer to this somewhere but I ...

Word 2003 cannot save files to http://host/site/folder/file.doc

Gemma M - 23 Feb 2006 1:43 PM - 10 messages

Hi, I have an Intranet Web site which generates an HTML document on the server-side, and then, on the client-side, runs MS Word, which opens this HTML document, adds some Word formatting, prints it, and then saves it (via ...

Application Pool without Anonymous Access

yonido - 23 Feb 2006 7:27 AM - 5 messages

Hello I want to create a WebService which belongs to a custom application pool & doesnt allow anonymous access. I created a user Named "TestUser", and added it to the IIS_WPG group. Then i created a new application pool "TestAppPool" which is run by ...

What could cause my permissions to be reverted back

lgilkison - 23 Feb 2006 1:30 AM - 2 messages

I had sent some file permission on my IIS server and boom they all reverted back. Could this have been a hack? ...

How do I programtically generate a csr in IIS 6.0?

Linda - 22 Feb 2006 7:07 PM - 2 messages

Hello all, I am trying to find information about how to generate the csr programmatically from IIS 6.0. Can somebody point me to more info or scripts that already exists? Sincerely, Linda ...

file system object

jasminess - 22 Feb 2006 2:49 PM - 4 messages

hello. i disabled the file system object for my iis 6. but i have a search code for my site written by asp that uses the fso. if i enable fso, other users who upload their files by ftp to server read ...

Problem with anonymous user account and OWA

Amit Zinman - 22 Feb 2006 2:25 PM - 2 messages

HI, I changed by mistake the password for the IUSR_ account on the Exchange 2003 machine which is also a domain controller. Now OWA is not working. Is there any simple way to return things to the way they were? ...

Error 401.1

Sreekanth Doppalapudi - 22 Feb 2006 11:16 AM - 6 messages

Hi , I am using windows server 2003 with service pack 1 and integrated Authentication. In the local intranet all are working correctly, but from another geographical location through vpn we are trying to open the file it was displaying 401.1 error. ...

IIS Authenthication

ilariastorti - 22 Feb 2006 9:50 AM - 9 messages

Hi ! I've experienced a bad problem with user authentication on a custom asp.net application running on a windows 2003 server. This is the scenario. There is a windows 2003 server with SP1 and IIS 6.0 on which are ...

Tutorial to set up IIS 6.0 on win2003 server

Surre - 21 Feb 2006 9:47 PM - 4 messages

I need a tutorial that shows me step-by-step how to set up my IIS so that it will be safe. I mean something like this [link] but for win2003. Since I am not an expert I fear that my server will be in danger without a ...

SSL question

tolgay - 21 Feb 2006 2:14 PM - 5 messages

Hi, I would like to implement in an IIS more than one SSL certificates, for example one domain name is [link] and the other one is [link] and both of them in to a server and there is only one IP address. Need I use ...

NTLM and Kerberos

Joe - 21 Feb 2006 12:48 AM - 5 messages

I have a website using Windows Authentication and Delegation to access a backend SQL Server. Everything works when I am on the LAN. When I try to access the website from home I get the Login failed for User NULL... ...

IIS_WPG and NETWORK SERVICE

Larry - 20 Feb 2006 3:40 PM - 10 messages

I have an ASP.NET site hosted on an SBS 2003 server. The server is a day old and no changes have been made to IIS with respect to user rights, etc. I have configured IIS_WPG to have the rights necessary to access what needs ...

SSL Certificate for IIS 6.0 after Domain change

Steven Hughes - 20 Feb 2006 3:25 PM - 3 messages

I have an IIS 6.0 server that was configured with an SSL certificate. That server was moved into a different domain and I am now having trouble applying a new SSL certificate to this IIS server. The web server cannot seem to talk directly to the certificate server in the ...

How can I run some web sites by using a single IP address and port

hhubbo - 20 Feb 2006 11:20 AM - 3 messages

I have a server2003 with IIS6.0 Thanks Bo ...