IIS Security

(1) How do I install (or require SSL) SSL on a web site? (2) Do I have to use a certificate?  If yes, can I create my own? ...

I am experiencing a very odd and frustrating kerberos delegation problem (I think) that I hope someone can help me figure out.  I want to make my web server use the credentials of the user accessing the website to access my ...

I had to restore an image to my boot drive. The restore has an IIS image before it had the IIS cert. Is there any way to install the ssl certificate I have? I tried to create a new pending request but I couldn't use my existing cert. ...

I am a local administrator on a Windows Server 2003 system (SP1) and I cannot successfully logon to the Default Web Site.  Permissions and Security for WWWRoot lists Administrators as Full Control.  What am I missing? ...

Hi there, I use IIS6 on Server2003Standard with isapi-redirector to Tomcat 4.1.31 as servlet-engine. Everything works fine, ... but: every time, I call my servlet (even local or from a client) there are three entries in the IIS-Log, the first two of them with an error 401 ...

Hi I have a problem with a wildcard SSL and I'm sure someone else must have come across this scenario and solved it. We have a wildcard SSL *.domain.com I have installed the SSL and if the website is called whatever.domain.com ...

For a long time, I experienced random problems with Microsoft IE Web Controls. Most of the time, I managed to get the Tree View and Tab Strip to work again after they mysteriously stopped working. Unfortunately, IE Web Controls seems to have stopped working for good on my  IIS 6.0 ...

I get denied access, where can I allow PHP to write files? I get error messages when I try to fwrite, and I checked my php.ini file, there is a specific line to grant access to fwrite and fopen, does anyone know anything about this? -- ctrygstad ------------------------------------------------------------------------ Posted via [link] ------------------------------------------------------------------------ View this thread: [link] ...

Hello! I really hope, you can help me: I have installed an ASP-application with exactly the same IIS-definitions on Win-XP and it works fine! I try to install the same ASP-application on Windows Server 2003 Standard / ...

I am hosting a few websites on a win2003 server (fully patched) / IIS6.  Each site has forms that when filled out use CDOSYS to email info to users inside the company.  Everything works great. Are there any CDOSYS vulnerabilities that a spammer could use to take ...

Hi, I am trying to use the remote workspace , remote access website of our network, but it seems as it can be accesed only from inside our local network, how can i make it work from outside? Our outlook webmail and OMA work fine from outside. ...

I have a newly built Win2003 server w/IIS6. The server is standalone and there is no AD. Users log onto client machines with credentials that match user/pass accounts on the Win2003 machine. Everything works fine, clients get access to shared win2003 resources as expected. ...

I have a web server running Windows 2003 with SP1.  I need to use a client certificate to control the access to a path.  Under Properties -> Directory Security -> Security Communications (Edit) of the folder, I checked Require ...

would someone please tell my how to set my encryption higher ...

Is there any ill effects of installing virus scanning on an IIS 6.0 website - is there any directories that should be excluded? ...

Does anyone know of a security issue of using the root of a drive, for instance d:\, as the home directory of a virtual directory in IIS?  I am proposing doing this for purposes of Remoting to save a lot of ...

I am developing on two seperate laptops and I am posting my code to a hosting provider. My code works perfectly on laptop1 and on the hosting provider. The same code does not work on laptop2. On this laptop2 I am unable to create cookies, sessions or a ticket. I know ...

Hi, We have a w2003 domain controller which also has IIS ans WSUS on it. Are there any security implications with this setup or do you think it's better if I install IIS and WSUS on a seperate server. ...

I am writing an ASP page to edit a database. Ive done it many times in the past successfully and I am using copies of that successful code, so i wont worry about the db code or setup its fine. ...

I am still trying to get all my spn's configured properly and seem to be missing something. The details of the event log are; "The kerberos client received a KRB_AP_ERR_MODIFIED error from the server host/vieon-sql2k5-01.vieon.net.  The target name used was ...

G/Day Forum, We are working on complying with the Visa/MAsterCard Payment Card Industry Data Security Standard (PCI DSS). As part of this we need to imply the following controls on the storage of credit card data: to encrypt data at a folder level - that is all of the containing folders ...

I've read through all the SSL and Web Farm posts on microsoft.public.inetserver.iis.security and non of them seem to have the answer for me.  Before I start I have read the following articles: [link] (how to setup SSL on webfarms) ...

I ran the command cscript adsutil.vbs set w3svc/NTAuthenticationProviders "Negotiate,NTLM" which is causing some services to not use Kerberos which is causing some other problems.  I would like to find out how to remove this node as if I never ran the command. ...