401 Unauthorized error-- IIS Using old account to authenticate
Hi! So I recently uninstalled AD DS on Server 2012 R2, which was a fairly destructive task. IIS was running and we hit something unexpected.Since all the domain users were deleted, I removed all the...
View ArticleCertificate Trust List on IIS 8.5
Can anyone provide a valid method for implementing a CTL on IIS 8.5 that doesn't require me to stand up a server that is EOL?Scouring the interwebs keeps pointing me to posts that reference a tool from...
View ArticleSecure Connection Failed when trying to access https://localhost
Hi everyone,Windows Server 2008, IIS 7.0Only one web site, the Default.Bindings only on 443 with SSL certificate issued by GeoTrustPublic DNS redirects http to https, Firewall has http closed, web site...
View Articlehttp 500.0.64 IIS with Client Certificate Required
Hi All,* We have IIS7, ARR configured for website, SSL + Client Certificate Required.* This setup is running fine with many partners, but only for 1 partner we are getting below error into our IIS...
View ArticleIIS does not pass client certifikate to service
Hello,I'm running a webservice on ISS 7.5 (Windows server 2008 R2). The webservice is called by a client an revceives data. The data should be send via the web service to an external url (also a web...
View ArticleDelegation permissions and Custom site delegaton
helloI was testing permissions with AD accounts and IIS Manager users and I get the same error.machine/webroot/apphost/SITENAME cannot read configuration file due to insufficient permissions.do I need...
View ArticleApplication pool accounts identities
Working on setting up a site on a new server. The existing site was setup within IIS and uses it's own Application Pool. Within the application pool a seperate "SERVICE ACCOUNT" had been created to...
View ArticleIIS 8.5 ASP.NET 4.5.2 Web App Inconsistent behavior
I am a web administrator, not a developer and I have a .NET 4.5.2 web application on a Windows 2012 / IIS 8.5 server. It works when set up as an application under a web site but when I set it up as...
View Articleuse ApplicationPoolIdentity to connect to SQL
Hi All,I have a WCF web service hosted in IIS 7 (or maybe 7.5, whichever comes with Windows server 2008 R2) using DefaultAppPool running under ApplicationPoolIdentity per Microsoft's recommendation....
View Articlehttp error 403 after installing Orchard CMS via Ap Galary
Hi all, This has been going on for weeks now, I just installed Orchard CMS via the web app gallery, (right click the site, select install application from gallery), and upon browsing the site...
View ArticleHow to solve security Exception error
How to solve this problem Security ExceptionDescription: The application attempted to perform an operation not allowed by the security policy. To grant this application the required permission please...
View ArticleStart an external program from asp.net on iis 10.x
Hi, I have the following problem:I try to start an external program from asp.net on the iis 10.x.x.x . But I get every time the same exception by starting the process: Here is my code for creating the...
View ArticleProblem in hiding Server Technology
Hi, I am using Microsoft Server to host my website. When I analysed my website on site analysing tools. These tools show's a critical issue that the server Technology is not hidden. Please hide the...
View ArticleSecurity breach: PHP files are being created over http posts. IIS 7.5
I have a Windows Server 2008R2 / IIS7.5 hosting several Wordpress websites.The server is fully patched and all Wordpress sites are running the latest versions of Wordpress and all WordPress plugins are...
View ArticleFTP Realms - Local vs Domain
We have a 2008R2 ftp servers. user sign in using local credentials. However, we noticed that is the user doesn't exist locally, they are sent to the domain and try to authenticat there. We are...
View ArticleIIS 8.5 Management Services and disabling TLS 1.0
Good day, all.I am currently going through PCI compliance hardening on our web servers, and I am trying to disable TLS 1.0. Before rolling out, I created a test environment. My test configuration is as...
View ArticleModSecurity header tagging
I have installed ModSecurity on IIS 10 (development machine) and the requests do get filtered by the owasp rules, accordingly.But... I want to use the header tagging feature (combined with...
View ArticleKerberos UPN vs bare username with Web Application Proxy vs IE
I'm having an issue with Kerberos authentication behaving differently for external Web Application Proxy users than for internal Internet Explorer users. I originally asked about this on the Windows...
View Article503 Service Unavailable ; Application Pool stops; No Administration Rights...
HiI'm not able to run the application in IIS using service account configured in APP POOL advance setting -> Process Model Identity column : domain\service accountAfter configuring and running my...
View ArticleForms Authentication - 401.2 Unauthorized?
I am trying to retrospectively plug in Forms Authentication to an ASP.Net project that was originally created with the no authentication template using VS 2013 and ASP.Net 4.0 I have followed the...
View Article