How to remove Server: Microsoft-IIS/8.5 header banner in IIS
Dear All,I want to remove following banner from my response, how and where to do the same.Server: Microsoft-IIS/8.5Thanks in advance.
View ArticleIIS 7.0 Removing the Server HTTP Header
I have ASP.NET 2.0 application with Ajax controls in IIS 7.0 running under Classic app pool. I need to remove Server HTTP Header. Wanted to use URLScan. URL scan need to be added as ISAPI filter in IIS...
View Articleprevent HTTP NTLM information disclosure
My environment setup:Http Request > IIS ARR > IIS hosting UI > Backend Services.PEN test from external source hitting public facing site hosted on ARR - PEN test is finding the following and I...
View ArticleBetter error message for user with TLS 1.0 SSL disabled?
We're working to disable all SSL and TLS 1.0 on our IIS web server (to pass a PCI audit, of course). Is there a way to give our users a better error message (other than the browser just saying the page...
View ArticleWORKGROUP FTP - How to generate FTP Certificate Request
Dears,I have Windows Server 2012 R2 FTP Server member of Workgroup Network.I want to generate certificate request for the FTP instep to sign it in digicert.So please can you guide me on how to generate...
View ArticleUse IIS without Local Administrator Rights
In my Organization totally Domain Model group People are asking IIS admin privileges to host the sites but my intension is to avoid admin privileges on systems is there any way to provide the admin...
View ArticleIE keeps prompting for Credentials
I do not seem to be able to get a single sign on through IE working. It's probably something small and stupid, but to me also very elusive.The basic setup is rather simple: three windows 2012 machines...
View ArticleCreate and install self-signed certificates (for debugging) for multiple sites
We have multiple websites that all run from the same directory on the same server. They differentiate by having their graphics and other configuration data in virtual folders.We are currently working...
View ArticleEnabling TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 on IIS 8.x
Whatever Cipher suite preference I choose on Server 2012 R2, I can't make both Google Chrome and SSLLabs.com happy.I either get obsolete cryptography in Chrome or a Grade B on ssllabs.When using IIS...
View ArticleIIS 7 in Window 7
Hi,I have a login issue on anonymous site access.Following what I am trying to do.On window 7, I have IIS 7 and sql server (for testing) installed.I have created a site that has html and aspx pages....
View ArticleBasic Authentication does not prompt for user credentials - IIS 8.5 shared...
HelloI am an IIS veteran and have been using this technique for many years to require a user to enter credentials before gaining access to content.For some reason however, on this particular IIS 8.5...
View ArticleProblem with ApplicationPool Identity
HiI am using Windows server 2012 (IIS 8.5). I hosted a website (created in vs2010) in IIS 8.5. I created an ApplicationPool to my site, and the options, Identity is set to "ApplicationPoolIdentity"....
View ArticleIP adress and SSL problem with SSL settings
I broke some problem to configure SSL with only IP address like in the post http://forums.iis.net/t/1226394.aspx?SSL+self+signed+IIS+7+5+and+local+address+IP but I still have a problem.If In IIS 7.5 I...
View ArticleAllow access to only certian AD Group users to IIS site
I have created Active Directory Group to allow access to certain user to IIS site (IIS version 8.5). Both, AD server and IIS site are running on different servers. All the users are allowed to login,...
View ArticleSend root certificate as part of SSL chain
When IIS is building up a certificate chain to send to the client during SSL negotiation, it excludes the root certificate from the chain. For instance, if my chain is Server Cert -> Intermediate 1...
View ArticleConvert htaccess 'FilesMatch' for blocking ip access to iis web.config
<FilesMatch ".*"> Order deny,allow Deny from all Allow from 124.85.14.238 Allow from 224.185.4.45 Allow from 112.48.34.0/23 Allow from 105.193.28.0/22 Allow from 222.124.249.0/24 Allow from...
View ArticleEnabling Smartcard login with username hint
Is it possible to configure IIS to prompt for Smartcard authentication WITH the ability to specify a username hint? (Refer here if you're not familiar with username hints.)We already have username...
View ArticleIIS 7.x SFTP support
I would like to use IIS with SSH is it any chance to use this feature or should use 3rd party tool for that?
View ArticleVirtual Directory IP Security
Hi,I am trying to script up the creation of a website and its pretty much complete. However I have the need to restrict access to one virtual directory, which is fine and I have scripted this. However...
View ArticleCannot Change Logging on Application
Logging option is greyed out. Unable to make any changes.
View Article