IIS Security - Week 5, 2006

Integrated Windows authentiation does not working

WiZARD - 4 Feb 2006 7:02 PM - 8 messages

content of web.config file(briefly) ------- <Admins> <add key="EXPLORER\Administrator" value=""/> <add key="EXPLORER\Administrators" value=""/> <add key="EXPLORER\Debugger Users" value=""/> </Admins> ...... <authentication mode="Windows" /> ...

Forcing SSL with custom error messages

J1C - 2 Feb 2006 10:03 PM - 5 messages

I followed David Wang's instructions but for some reason I can not get past the redirect... It does fire from HTTP to HTTPS without any trouble ... but it just sits on the error page ... <% if request.servervariables("server_port") = 80 then ...

File Upload issues with WebClient.UploadFile

Phillip N Rounds - 2 Feb 2006 6:11 PM - 2 messages

I'm having problems using the WebClient.UploadFile() command. I have MySender.ASPX which is supposed to upload two files to the server. There is also ConsumeFileUpload.aspx which is intended to handle receipt of the files. Pertinent code for each is below. ...

Cert Trust List - Export & Import

Mark Pfeifer - 2 Feb 2006 4:28 PM - 2 messages

Is there a way (outside of custom code) to export a CTL list so we can apply the same one to multiple servers? TIA Mark ...

Windows Authentications Issues

lostdante - 2 Feb 2006 1:20 PM - 9 messages

Hi, New to the group and need some help. I've set up a new web site on our server and want to limit access to the site to a selection of users with windows account son the server. I've set the site to windows authentication, removed the 'Users' group from ...

Allow temp access to demo system

mark - 2 Feb 2006 3:24 AM - 2 messages

Hi All, Hoping someone can help. Need to know if there is software available that can allow propect customers (where ever they are located) to have temporary HTTP access to a demo system here that the sales guys use so that the prospect can see what the ...

IIS website - only allow users with client cert from our CA. Possi

Frank - 1 Feb 2006 9:25 PM - 4 messages

At our company, we are trying to implement a solution where only a client computer we allow can access our IIS website. I deployed a Windows 2000 Server with Certification Authority (CA) server installed (Server A). Then went to the Windows 2000 server with our webpage ...

Windows Authentication on iis new website not working (fine on default website)

pdbaker - 1 Feb 2006 5:15 PM - 3 messages

I'd be really grateful for some help on this one...I'm really not a security whiz though so please don't baffle me :o) Trying to move the contents on the default website onto a new website on the same IIS server but using a different port number (81 instead of ...

login window pop up for integrated windows authentication

gubba - 1 Feb 2006 4:20 PM - 2 messages

i have server with windows2003 and IIS6.0, its a simple virtual directory with integrated windows authentication. when i type in ie http://servername it pops up login window for credentials. have checked all permission,used adsutil NTAuthenticationProviders and set ...

IIS 6.0 NTFS Permission not working

Telo - 1 Feb 2006 3:29 PM - 3 messages

I limit the access to a website using NTFS permission. I gave Admin and System Full Right, IIS_WPG Read Execute, and L_BOE read access. I also disabled Anonymous access and enabled IWA. The plan was to only allow members of the L_BOE local group to access the web application, ...

"The page cannot be displayed" for non domain users

Bart - 1 Feb 2006 10:24 AM - 10 messages

Hi, I have an intranet situation where I connect to the lan with my laptop, but I'm not a member of the domain. the IIS is hosting a 'MyProfile' website based on asp.net 2.0 with NTLM security enabled and anonymous disabled. ...

IWA but Login-Dialog - HTTP-Error 401.2

Georg Bauer - 30 Jan 2006 12:58 PM - 4 messages

I am using a XP-Client, IIS6 on W2k3 as Server, connected to Tomcat as Servlet-Container. If I start my Servlet without IIS, it works fine, if I start it with IIS (localhost), then IIS shows the Login-Dialog - I have unchecked anonymous ...

Authentication

Mehdi - 30 Jan 2006 11:45 AM - 2 messages

Dear everyone I have a webserver with Windows Advance server 2000 and IIS 5.0,I have a virtual directory on it with basic authentication,When I browse a file from this virtual directory with this command: "http://userName:PassWord@HostName/Path.../filename" if my O.S is Windows ...

adware

clayers86 - 30 Jan 2006 4:49 AM - 4 messages

i get popups when ie isnt open. I installed an adware detection program from microsoft but it still happens. ...

Selectively allow a user to Create Virtual Directories?

Joe - 30 Jan 2006 3:50 AM - 2 messages

We have an SQA machine set up to do testing of IIS hosted web applications. It is running Server 2003/SP1, and is joined to a domain, but not a domain controller. I need to delegate the following tasks to the SQA group, but would prefer ...