can't open .exe files on button click event
i have hosted my asp.net site in iis 7 in windows 7 OS ...in my application requires to open .exe file on button click event..but iis not allowing to open it...its working fine through visual studio...
View ArticleHTTP Handler to authenticate user using alternative credentials
I have a web app that currently authenticates users using a username & password. The application uses Windows Integrated Authentication today.I would like to change the system to authenticate using...
View ArticleIIS7.5 - Certificate Trust Lists, Unable to create CTL's or Assign to a...
Hello,I am moving an IIS system from Server 2003 to Server 2008 R2, the site requires that the SSLBinding works with specific set CA's (less then what is in the CA Store) thus why the use of a CTL.I...
View Articlesuper easy impersonate question iis7
I am curious how to explain the rational on using impersonate account instead of relying on my application pool identity. Anyone got the low down on the pros and cons of both?
View ArticleDynamic IP Restrictions useless?
Without being able to set a duration for the lockout beyond the actual period of time you are specifying to monitor for hits, this tool seems useless. I want to deny an IP for 30 minutes if they make...
View ArticleHow to determine in a client app if the server requires a client certificate
Hi,I'm using the HttpWebRequest object and connecting to various servers, one of which is setup to require a client certificate.My question is how in the client app can I determine whether the server...
View ArticleHTTP PUT Vulnerability in IIS 7
Hi,I would like to know whether the vulnerability in HTTP PUT is still existed ? And I would like to know whether there are any solution or patch to solve this vulnerability issue.Reference :...
View ArticleConfiguring constrained delegation for IIS 7
I am configuring Kerberos authentication for an IIS web site, that must use constraint delegation with option "Use Kerberos only" to access an external service. I am using KerberosToken class from WSE...
View ArticleIIS8 / SCCM2012: Error 403.16 - again...
Hi everyone,banging my head against this one for literally weeks so hoping for some insight form the community. Here goes:Enterprise Root CA (Windows Server 2008R2), CA cert is valid until 2024...
View ArticleIs UrlScan 3.1 compatible with IIS 8.0 ?
Hello,I read that UrlScan 3.1 extension is compatible with IIS 7.0 (http://www.microsoft.com/en-us/download/details.aspx?id=5728).It is also compatible with IIS 8.0 without adverse effects on...
View ArticleIIS Authenication
Hey guys,I'm quite new to IIS, however I have had some exposure, basically my predecessor has bought some SafeWord MobilePass tokens (basically a little app to run on smartphones that gives out OTP...
View ArticleSlow HTTP attacks and ModSecurity for IIS
Hi,I'm trying to find a good solution for DDoS attacks on IIS servers...I thought I found a way via ModSecurity and the SecWriteStateLimit directive, but it seems this doesn't work on IIS, probably...
View ArticleAllow domain user to restart application pool or IIS from command line.
I have many servers with .NET 4.0 Application pools. Due to the nature of the applications and what they are doing we are unable to use the msdeploy tool to deploy our application releases. We have...
View ArticleHow to host IIS app not in DMZ? i.e. what do I need in the DMZ to allow...
What are some best practice approaches to ensure security but host IIS web applications "outside" the DMZ? Some sub-questions I could ask to help clarify:a) Are there valid approaches to achieve the...
View ArticlePermissions on specific folder to write to
Hi All,We are running an application on IIS 7 which has to output data to a specific (local) folder. The application is running anonymous auth. and the application pool is running with a service...
View ArticleIIS running as machine$ or AppPool\app_pool_name?
Hi all, I'm finishing up an app that uses HeliconTech Zoo to run Python in IIS 7.5. I need the user that IIS is running as to be given permissions on the Windows Tasks directory so that I can use the...
View ArticleIIS 7.5: SMTP "Connection Control"?
Hello!I want to have the following basic setup of SMTP service (with IIS 6.0 Manager): Single machine, only for relaying, with windows authentication from anywhere outside (dynamic IP), and anonymously...
View ArticleIIS 7.5: I just want a password for this home server.
Basically, I just set this thing up to play videos on the Wii U. It works fine, but I'd like to have it to it private. I've done lots of searching around, trying to figure out some way to do it, but I...
View ArticleIIS 7.5 Windows Authentication fails unless the code files are shared to end...
Hi All,I’m setting up a simple Classic ASP application, to read the user login using Windows Authentication, in IIS 7.5 on a Windows 2008 R2 Server. (The application is just one file and has this line...
View ArticlePossible to authentication against Active Directory using anonymous auth?
We setup an extranet site for employees to access content when they are off of our domain. The site is configured with Windows Integrated Authentication which unfortunately triggers a popup...
View Article