REMOTE_USER Without 401 Authentication
Hello, I've got two servers, one is AD server on Windows Server 2008R2 and second is Windows Server 2008R2 IIS Web Server,I want to have an authentication without 401. I want to get REMOTE_USER,...
View ArticleVirtual Directory to Windows network share, security
My questions is two-fold as I am an IIS newbie. I have created a website successfully via IIS 7.5 with anonymous security. Users are authenticated via a SQL database table. In IIS Manager, under my...
View ArticlePassing An Encrypted Password
Hi guys, I've got a situation that seems to be a real outlier here and I'm stuck against a wall. I'm using appcmd to set passwords for iis and I need a way of passing an encrypted password. I would...
View ArticleIIS 7.5 Permissions
Hi,Just taken on a client who has a domain controller (2008 server) with IIS installed. There is a website on it but Google Webmaster Tools shows errors with Google Bot and some of the pages cannot be...
View ArticleAllowing 2 internal AD domains to access the same IIS site
I have an IIS site that I want to allow all domain users in 2 domains to access. We have a full trust between the domains, but I cannot seem to find an article that describes how this is done. Can...
View ArticleIIS 7.5: useAppPoolCredentials="true" being ignored on one server
Hello gurus.I have 3 Windows 2008 R2 web servers behind a load balancer that run a PHP application which accesses files on a DFS share. DFS share and web servers are in the same domain, the sites run...
View ArticleModsecurity for IIS 7
Hi Guys,Having some trouble getting modsecurity to work in IIS.I set SecDataDir to something like c:\temp and log locations like:SecAuditLogType Serial SecAuditLog c:\inetpub\log\modsec_audit.logBut I...
View ArticleNon anonymous authentication between linux apache php to iis 7.5 php
Hi, I have found that this is a difficult question to search for. Possibly due to lack of understanding but...I have a apache php front end running on linux. Some PHP requests are directed toward a...
View ArticleI'm still getting 'access denied ' from accounts I have set up access for
I have an AD object that is trying to log into IIS. However they keep getting a sign on request and then access denied (i'll attach errors). I have never done anything with IIS so these are just very...
View ArticleHow to secure an IIS file download with an ASP script
Hi,I was wondering if anyone can help me with my problem.I have written an ASP script that takes the URL parameters and does some 'validation' and then if a specific set of conditions are true it then...
View ArticleSSL Directory
Hi,Cannot open pages as an Internet user that are in a directory which has SSL set. Clicking links to those pages causes COMMUNICATION FAILURE whereas a local user can access themIIS 7.5Anonymous/Forms...
View ArticleRequire authentication externally, use anonymous internally
Is it possible to configure IIS in a way that if I'm accessing my site from an external source/IP that authentication would be required but when accessed on the internal network anonymous...
View ArticleHTTP Error 401.2 - Unathorized Error
I am getting a HTTP Error 401.2 - Unauthorized error when I try to browse my application locally athttp://localhost:51908/. The trace log is showing the following...
View ArticleHTTP Error 401.2 - Unauthorized when accessing...
Hello,I've been trying to solve this issue for several days with no luck. I resently installed Vista Ultimate, with SQL Express 2005 sp2 with SSRS and IIS 7.0 per several KB instructions I found on the...
View ArticleHow to set the "secure" and "httponly" flag for all cookies?
We had a recent security audit, and we're advised to set the "secure" and "httponly" flag for all cookies. We're running IIS 7.5.Can anyone tell me how to do this and/or point me to a resource they...
View ArticleImpersonation as a user brings Anonymous Logons to network filesystem
Hi,i wrote a ASP.Net program, which impersonates as a domain user and logon to a file share on another computer. I followed the instructions of...
View ArticleReverse Proxy Configuration
Is there a way I can have my IIS on Windows Server 2012 to face the internet and have one virtual directory as a reverse proxy to another host running within the network.For...
View ArticleApplication Pool Identity and Local Service and Task Scheduler
HelloI'm try to access the task scheduler from a web application to manage some tasks but when the identity of the application pool is Application Pool Identity, it can't access to the task scheduler,...
View Articlegetting HTTP Error 503. The service is unavailable. for http://localhost/ccnet/
Hi, I m installed for Cruise Control .Net and configured Webdashboardafter that i am trying to opening i got an error HTTP 5000.19 error then i solve it by unlocking (<location> tag).Now i...
View ArticleServer Hello after HTTP GET, normal behaviour?
I have been setting up a network monitoring probe that we are going to use to monitor users experience and performance on our website, by inspecting the network packets.Our IIS instance is hosting...
View Article