Management Services Security - PasswordFormat on IIS 7.5
Hi guys, I have a security requirement for IIS 7.5 Management Service to meet as per customer's requirement. The following security setting are required:1. I have installed the Management Service but...
View ArticleImpersonation Question
In 2005, I put together (with help) a website on our company intranet using impersonation. The intranet site accessed a network server (a virtual directory on the intranet server) with pages and pages...
View ArticleSimple credentials
Hellohow can i set a simple user name and password for a web service (iis 7), not an AD user,impersonate and etc, jast a simple credentials past in clear text,i know there is a way, i jast dont...
View ArticleAD user authentication to allow access to FTP server
I have looked and tried all the suggested remedies to set this up and still can't get a users AD account to authenticate access to a local IIS 7.5 FTP site. This should not be that complicated, but no...
View ArticleIIS no longer trusts any CAs for client authentication
Yesterday the IIS on our build server (Windows Server 2012) started refusing our clients' certificates. The certificates are signed using our own self-signed CA cert that has been added to Trusted Root...
View Article[Solved] : Client Certificate Mapping Authentication failed. IIS 8.0 and...
Hello, I try to use the Client Certificate Mapping Authentication on the website of my PKI.When i connect to the url https://srv01.test.com/CertSrv/, i can choose which certificate i can use for...
View ArticleNewbie - web site now gets 403 Forbidden - Access Denied
Hello All! Here is the newbie again. This is on a Windows 2008 server running IIS 7. Ok - using WoprdPress - used 2 WordPress plugins to change the URL's and database to be mywebsite.com, and...
View ArticleEnsuring Secure Download for IIS
I am running into an issue where one of my customers wants to make sure when someone downloads for their website, that the file being downloaded is secure from third parties capturing the downloaded...
View ArticleWindows Firewall exceptions on an IIS Server to access SQL Server
Hello,I've got two machines in my domain. One of them is IIS Server (IIS 7 on Win2008R2Std), and the other one is SQL Server (SQL2005 on WinSrv2003). They're in the same subnet.I've just established...
View ArticleHow do I authenticate a domain user to be able to use a network location as...
I have an image with the src located on a network like so<img src="//networkpath/image/image.png" />The image renders just fine while debugging in visual studio, but it doesn't show once I...
View ArticleIIS AuthenticationModules not working with Custom Module
Hi,we want to achieve the following:We use a custom module to handle application requests. It has to react on any URL and thus is written as IHttpModuleWe still want to use IIS authentication to do...
View ArticleApplication Pool Identity with AD user
Dear all,I just created a new Application Pool in IIS 7.5 and I want to set the identity to an AD user called dev_usr.Dev_usr does not have any rights yet. For now it is a simple AD account which can't...
View ArticleHow can I disable SSL for localhost access?
From within an external component controlled by our IIS .NET web application I need to issue a web request to address some of our images.DNS services have been disabled, thus, I can only access these...
View ArticleExposing IIS web application externally and securely
Hi All,I was hoping someone could help me as this is not my strongest area. The company I work for has a web app that they want to access via mobile devices. However, I'm unsure how to configure IIS...
View ArticleTrying to understand http(s) Get web service attack parameters
We have a test server that hosts an iis 7.5/.net 4.0 c# webservice. Port 443 open to the internet as it is accepts just https requests. Someone was trying to hack in and I can see it in the IIS logs...
View ArticleNot able to successfully set up Impersonation on web playlists
I follow the instructions here - http://www.iis.net/learn/media/web-playlists/web-playlists-for-iis-serving-media-content-from-user-folders but when I try to access the play list I get a username popup...
View ArticleIIS 7.5, Win2008 Server R2 - 401 - Unauthorized: Access is denied due to...
Hi,I'm setting up my first site on IIS 7.5.7600.16385 on Windows 2008 Server R2 Standard, and for some odd reason I'm the only user that can authenticate to the site. All other users get the "401 -...
View ArticleIIS 8 Virtual Directories, Windows authentication and Error 401.3
I've created a virtual folder pointing to a network share. I want to use Windows authentication because I want to be able to determine who has access to the file location via an AD group which has...
View ArticleAuthentification
Hello, I'm french, so excuse me for mistakes. I'm using IIS 7 and i have a problem with authentification. Each time that I close my webbrowser and that I'm back on my web application or that I turn off...
View Article403.12 when using client certificate mapping
I’m trying setting up a IIS site to use client certificate mapping, but am having deficulties using many to one mapping on a specific issuer. I downloaded a test certificate from this...
View Article