IIS Security

I have deleted the localstart.asp file from my web server because of the vulnerablity associated with a brute force attack on localstart.asp. This server is my OWA server. Everything works fine but, my vulnerability scans continue to show the localstart.asp vulnerability. When I go to ...

I am out of options on trying to get this to work. I have a site that sits on our development box in a vlan. No matter what I do I can't access the site as an anonymous user - it just prompts me with a challenge response. If ...

Hello all, using windows 2000 pro and IIS 5.  What I would like to do is set up an error message so when someone clicks on a link that begins with https they would be directed to a page I have made that states that this page is ...

I have built a java applet that creates and writes user input into text files. I'm running Windows Server 2003, and I do not know how to set the permissions of the website in IIS to allow any user to save the data in a ...

Strange issue: We have a Mixed Mode, Windows 2003-based domain (still have NT4 BDCs). Users that have read/list/execute permissions to a website are in a Global Group and that GG is given NTFS permissions to the site. ...

Hello.  I am a regular in the SharePoint Portal Server NG but this is my first time in the IIS group so forgive me if I get this wrong. I am trying to understand authentication.  I know that if I set up a web ...

Hi, I'm a bit of newbie to networks and IIS. The users on my network, log in using a novell login box when they boot up their pc. When they open their browser, they have to enter the same username and ...

A friend runs IIS on a windows XP system. The following is an excerpt from his logfile. It appears someone is trying to get iis to run the command line interpreter. This raises a couple questions, and since I use apache I really don't know enough to answer them. ...

Is there someone to know that it is possible two authentication in one IIS? because I have two sites, one is http://asite and the other is http://bsite. for http://asite is used by Windows authentication and http://asite is used ...

We've got an ASP.NET 1.1 app that runs fine on LOCALHOST of an XP Pro SP2 box but won't run on a Windows 2003 server when deployed via XCOPY. It wants to authenticate against the domain via the challenge popup(which it shouldn't) ...

Our intranet is running under windows integrated security.  We have domain users that want to access our intranet site via ssl vpn.  SSL VPN can not authenticate against services that run under windows integrated security. In order to get around this issue it seems that we ...

All, We have a .NET application running on Windows 2003/IIS 6.0. I set up the application pool account with the network service account and have allow anonymous set for the web site. It is using the iusr machine account. In ...

Hi All, if you have a file name with a % in iis blocks the request and i cant find where to change it, it's not urlscan but a core option. Any idea where i can change this? ...

I have made myself a Secure Server Certificate through the Certification Authority in Win Server 2003. I installed it on my computer but when ever I go to my secure site through the internet, a message pops up saying that the server that the certificate came from ...