microsoft.public.inetserver.iis.security
  Home FAQ Contact Sign in
microsoft.public.inetserver.iis.security only
 
Advanced search
December 2006
motuwethfrsasuw
    123 48
45678910 49
11121314151617 50
18192021222324 51
25262728293031 52
2006
 Jan   Feb   Mar   Apr 
 May   Jun   Jul   Aug 
 Sep   Oct   Nov   Dec 
2008 2007 2006  
total
microsoft ... iis.security Profile…
RELATED GROUPS

POPULAR GROUPS

more...

 Up
  IIS Health Checking Tool         


Author: Robson Eularios
Date: Dec 27, 2006 13:07

I'm looking for some help!!

I have 300 Servers that I need to check if all IIS Settings are compliance
or no.
I would like to know if there is a tool that help to do this.
I don't have any idea where I can search this..

Best REgards

Robson Eualrios
1 Comment
  Health Checking IIS Tool         


Author: Robson Eularios
Date: Dec 27, 2006 13:04

Hello Guys

I'm looking for a tool that can make a health checking for security
configurations in IIS 6.0 and 5.0.

Please help me with this issue I have 300 boxes to check if are in
compliance or no..
no comments
  Outlook Express: wav. files removed         


Author: Frawseys
Date: Dec 27, 2006 03:14

I am looking for some help! Every wav. file that is sent as an attachment is
'removed by OE' as it is deemed an unsafe attachment. Is there any way I can
enable the downloading of these files?

I have gone into tools, options, security, and then unticked the block
images box and the do not allow attchments box, but this seems to have made
no difference!

Annoying, as my son keeps sending me video clips from his travels, and I
can't view them!
Any tips please??
1 Comment
  Security/Permissions Problem         


Author: Tango T
Date: Dec 25, 2006 05:16

IIS6 on 2003 Standard Server.

I have my webpage set up adn IIS is running. Locally the webpage appears.
Outside requests are challanged for username and password. The local
administrator account works. I've created other local accounts to test but
they are not granted access.

How do I allow outside requests anonymous access without challange?

Thanks!
Tango
5 Comments
  Re: .asp access to Dynamics SQL databases         


Author: Ken Schaefer
Date: Dec 23, 2006 17:48

"Steven Church" discussions.microsoft.com> wrote in message
news:01257C06-02DF-4B07-8BD4-9F7D60D1A0D8@microsoft.com...
> Hi Ken,
>
> Yes, I believe the problems are general authentication issues.
> CRM does use/require a Windows login and those are the credentials I want
> to
> pass to the CRM database. The trusted connection strings I've tried don't
> seem to work. I was using basic authentication.
> One of the things I've tried was to create a CRM user account for IUSR_...
> but that didn't help either. (If I change the security settings on the
> web
> server to run as my personal account, everything is fine. To my knowledge
> the IUSR... and my personal CRM user are set up identically.)

Hi,

When you use that particular Trusted Connection to the CRM database, what
error do you get?
Show full article (4.80Kb)
no comments
  Re: Login not require a domain in IIS hosted site?         


Author: David Wang
Date: Dec 22, 2006 08:56

I don't understand what you are asking.

If you allow only anonymous authentication, how would it work like NTFS
permissions? Anonymous authentication means only the configured
anonymous user is used to access resources on the server no matter the
remote user.

Field personnel's work-group account is the same as unknown user so
they'd get prompted with Integrated Authentication and as configured
anonymous user if Anonymous authentication. But your field personnel
computers can be in the domain, take cached copies of the domain with
them (automatically by Windows), and have auto-login with Integrated
Authentication work just fine even when the field personnel is
disconnected from the domain.

So, I'm confused by your auto-login/prompt issues. They shouldn't exist
given propr configuration.

//David

Shawn Melton wrote:
> I have my SharePoint site configured as disabling Anonymous access and then
> Integrated Windows authentication.
>
> If I allow anonymous access and take off Integrated authentication...
Show full article (1.65Kb)
no comments
  Re: Certificate Installed Now I can't log into the Site         


Author: Ken Schaefer
Date: Dec 21, 2006 15:30

Hi,

If this is an IIS 6.0 server, then there should be a substatus code in the
HTTP logfiles. The HTTP status will be 403, and then there will be a
substatus file after that. That will give you some indication why you are
getting access denied. There is a table here of possible values:
http://support.microsoft.com/?kbid=318380

Glad you got it fixed.

Cheers
Ken

--
My IIS Blog: www.adOpenStatic.com/cs/blogs/ken

"Jon Slater" comcast.net> wrote in message
news:%%23kxu$tGJHHA.420@TK2MSFTNGP06.phx.gbl...
> Ken,
>
> Thanks for your willingness to help but I found out the answer as I kept
> working...
Show full article (3.32Kb)
no comments
  IIS         


Author: suchdi
Date: Dec 21, 2006 09:34

I have a very difficult for me problem.I am a single user of my house
computer which runs under windows xp professional.I have installed IIS,but
when I enter Internet Explorer,write localhost I receive error HTTP 401.1
unauthorized ccess .
How can I solve it?
no comments
  SSL Detect Redirect         


Author: Greg
Date: Dec 21, 2006 07:15

I would like to find a way to detect if our SSL certificate is
installed locally on the clients computer and redirect based on if
it's present or not. We self assign certificates and do not have the
need to buy one. Since the release of IE7, users are now getting the
"There is a problem with this website's security certificate" page
and are not continuing on. We have a way of installing the certificate
through a web page, so I would like a script that would check if the
certificate is installed and sent them to the secure page if not
redirect them to the certificate install page. Does anyone know if this

is possible?
1 Comment
  Re: Login not require a domain in IIS hosted site?         


Author: Shawn Melton
Date: Dec 20, 2006 20:16

My question goes along this route.

If the "intranet" site is within the same domain that the username and
computer is on, why does it even prompt them for authentication? Is there no
way to just automatically use the current computer login credentials?

I have this issue with my SharePoint services site and other miscellaneous
sites.

Is it possible to use anonymous logon but NTFS permissions to get around the
security prompt?

"Smokey Grindel" wrote:
> I don't want to have to use anything but their username...
>
> "David Wang" gmail.com> wrote in message
> news:1165752322.580819.122640@79g2000cws.googlegroups.com...
>> Use UPN, and have...
Show full article (1.64Kb)
2 Comments
1 2 3 4 5 6 7 8 9