All Forums

IIS 7 Trust Level Multiple Websites

2013-05-18T03:30:18.897-04:00

I am working with IIS 7 and need to change the Trust level so that it can be applied to multiple websites. Can this be done without having to change the trust level for each individual website? Thanks.

Http error 404 , Set Default page to my website

2013-05-14T05:26:43.59-04:00

I'm trying to set default page to my site , but in every time it shows error .

My site was in windows server 2000, and now i want to transfer it to windows server 2008 (iis 7)

http://www.iis.net/learn/application-frameworks/running-classic-asp-applications-on-iis-7-and-iis-8/classic-asp-not-installed-by-default-on-iis

I do the config steps but every time it shows 2 error :

i already have default is (default.asp) . but the iis connot find it in the site , or something else

the default page in C:\inetpub\wwwroot

but it redirct to C:\inetpub\wwwroot\iishelp

why ???

another error :

How I Can Do It ???

Force ASPSessionID to change on login

2013-05-13T18:50:22.82-04:00

Question:

How do I get Classic ASP to change the session ID after the user logs in?

Background:

One of our clients ran a security audit against our web site. So far, we've been able to resolve all the issues they reported. However, there's one security issue that I'm not sure how to solve, mostly because I've never worked with Classic ASP before. When the user goes to our web site, classic ASP creates a session and sets a session ID in a cookie. When the user logs in, instead of changing the session ID now that the user has been authenticated, the session ID remains the same. This is considered a security flaw to use the same session ID after authentication. (See http://shiflett.org/articles/session-fixation for information from a PHP perspective.)

So, here's my question: How do I get Classic ASP to change the session ID after the user logs in? SessionID is read-only property, and there doesn't seem to be a method to regenerate this ID.

HOW TO SETUP A SNI (2 certificates for 2 domain in the same server and ip)

2013-05-13T17:50:13.09-04:00

i've followed this microsoft guide but doesn't work for me http://www.iis.net/learn/get-started/whats-new-in-iis-8/iis-80-server-name-indication-sni-ssl-scalability, i get this error: cannot unistall certificate.

I've two certificate one from godaddy that require a preinstallation in "mmc\intermediation autority certification"

http://support.godaddy.com/help/article/4801/installing-an-ssl-certificate-in-microsoft-iis-7

and a rapid ssl that can be installed directly https://knowledge.rapidssl.com/support/ssl-certificate-support/index?page=content&actp=CROSSLINK&id=SO10517

WHAT I HAVE TO DO IN ORDER TO CREATE A SNI WITH THESE 2 CERTIFICATES?

10$ to the right answer with paypal

php forum - login re-direct issue since running on IIS 7.5

2013-05-13T08:19:54.833-04:00

Dear all

I do have a forum, running on an LAMP environment. The login there works just fine, you enter a username and a password, click on "login" and you get directly logged in and re-directed to the front-startpage of the forum.

I've moved the forum to an IIS 7.5 (Windows 7 64bit), where php (5.3.10) and mySQL (5.5.20) is running.

Running the forum there, brings the following issues:

- login does not correctly work -> username & password provided, and clicked "login" will NOT log you in until you click on the front-startpage (looking into the database, say's exactly the same, once you click to go back to the frontpage, it loggs you in)

- If a new posting is made in the forum, and you read it, it's not getting marked as read - it takes about 1h until it's marked as read

I was looking for a solution, or same issues and found some hints, regarding cookie handling on an IIS php hosted site

Any ideas?

Trouble getting ASP to work

2013-05-12T16:29:59.22-04:00

Hello everyone.

Windows 7 Ultimate
IIS7

At first I enabled all settings in IIS, The default page of IIS which shows up at "http://localhost" could be viewed but when i tried to view pages in "C:\inetpub\wwwroot\MyWeb", i used to get a 404 error.

Then i tried:

ASP
ISAPI extensions
Request filtering

It didnt show me the default IIS page even. Then i tried:

ASP
ASP.NET
ISAPI Extensions
Default document
Static content
Request filtering

It showed me the default page but when i tried to view files in the directory, chrome said that the link appears to be broken. At present my settings are:

IIS management console
.net extensibility
asp
asp.net
cgi
isapi extensions
isapi filters
server-side includes
default document
static content
request filtering

Still, i am getting the "link broken" message. Please help, this is urgent.

Oh, and I am using Dreamweaver CS5 and when I preview the ASP page from Dreamweaver it asks me if i would like to specify a testing server. I choose No as I am new to this and not aware of how to specify a server. Is that the problem?

redirect but keeping the original url

2013-05-12T15:03:02.403-04:00

I managed to redirect HTTP request via another port. but I want to keep on the browser the orginial url.

for example: if i redirect the request: localhost:7020/blabla1/

to localhost:7010/blabla2 I dont want the user to see this url. I want to keep in the browser the original url.

I perform the redirect using a redirect rule.

another question.

What is the best way to map the urls from the pattern:

localhost:7020/myblabla/uniqueuesr1234

I want based on the uniqueuesr1234 string to decide via which port i'll redirect my request.

corrently for every string i am making a new redirect rule.

Appreciate your fast reponse.

Event ID:1027(Time out expired) In IIS 7 due to which applications cannot be accessed. Can any one give a soln to this.

2013-05-17T09:59:28.377-04:00

Hi,

I get the below error message:

Log Name: Application
Source: .NET Runtime
Date: 5/17/2013 3:33:22 AM
Event ID: 1027
Task Category: None
Level: Error
Keywords: Classic
User: N/A

pplication: w3wp.exe
Framework Version: v4.0.30319
Description: The process was terminated due to stack overflow.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name=".NET Runtime" />
<EventID Qualifiers="0">1027</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-05-17T07:33:22.000Z" />
<EventRecordID>844618</EventRecordID>
<Channel>Application</Channel>

</System>
<EventData>
<Data>Application: w3wp.exe
Framework Version: v4.0.30319
Description: The process was terminated due to stack overflow.
</Data>
</EventData>
</Event>

IIS different Output as source

2013-05-12T10:40:30.39-04:00

hello all

is it possible to manipulate the output without having a source for it ?

for example: on a site a test shows up which will be downloaded/transfert to the client but in the traffic another traffic (depends on some criterias) will be shown on the client. its difficult to explain.

"foobar" is coded on the website and show in the source but "barfoo" will be submittet (in reallity) to the client (which no source code exist)

thans for any brainstoring

HTTP Service won't start because of digital signature

2013-05-17T14:37:59.677-04:00

Hi everybody,

We have a Windows Server 2008 machine that it's HTTP service won't start (resulting that w3svc won't start resulting that IIS won't start). We ran "net start http" and the following error message appears... "System error 577 has occurred. Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.".

This server has windows update up to date and its antivirus definitions are up to date. We ran Windows System File Checker (sfc /scannow) but didn’t found any problem with the OS system. We also restarted the server.

We haven't reinstall the Web Server (IIS) and/or Application Server roles in Server Manager because this machine has MOSS (Microsoft Office SharePoint Server 2007) and Microsoft CRM 4.0.

Any recommendation will be appreciated.

Jorge.

Secure Access to Web Site with appcmd.exe

2013-05-12T02:27:07.21-04:00

Hello all,

we have a web server that hosts lots of web applications that I create with a batch file script using appcmd.exe. the idea here is that each team has their own web app and they must not be able to access the other's web apps.

I am able to secure them with Authorization Rules, which by defuault is set to inherit and allow access to all, but I would like to be able to secure them with appcmd.exe so that I can add a line for that in the same batch file.

I am not being lazy, but I am trying to make sure that I don't forget to secure them and then fail audit or security scan.

any ideas?

I appreciate all comments and assistance with this matter.

Thanks

Mohsen Almassud

IIS 7.5: useAppPoolCredentials="true" being ignored on one server

2013-05-18T15:21:38.653-04:00

Hello gurus.

I have 3 Windows 2008 R2 web servers behind a load balancer that run a PHP application which accesses files on a DFS share. DFS share and web servers are in the same domain, the sites run with the same single domain service account identity and use physical path credentials of the domain service account. Kerberos is set up on the domain service account to delegate to the servers hosting the DFS share. The sites use Windows Authentication but I want to turn off user impersonation for the access to the DFS share and use the domain service account credentials, so useAppPoolCredentials="true" has been added after useKernelMode="true" and on the first 2 web servers this configuration works fine. Procmon shows the DFS share being accessed using the domain service account credentials, netmon and Kerberos logging shows Kerberos authentication working correctly and the application works.

Server 3 is set up with the same configuration but does not work. The application fails due to no permission on the DFS share. Procmon shows the actual logged in user account (which does not have permission) is being impersonated and not the domain service account, to access the DFS share. I have tried everything I can think of including diffing the IIS ApplicationHost.config files between the servers and I can see no differences (hashes aside). If I set the site to anonymous and change the anonymous identity to the domain service account it works, and the domain service account is impersonated to access the DFS share, so Kerberos is working fine on that account from that server. The issue is that as soon as I set it back to Windows authentication, it always impersonates the logged in user and not the service account, regardless of whether the useAppPoolCredentials="true" is present or not . There is no difference in the server builds and I can't see any reason why the impersonation should be acting differently on one server. All other AppPool/IIS config, users/group memberships are identical and nothing is being logged.

Does anyone have any ideas where I can look next please?

Thanks.

Connecting to SQL Server using a Virtual Account

2013-05-17T10:30:23.933-04:00

Hi,
My IIS7 installation has two websites running on it. From what I was given to understand, they're both running on their own application pools, each of which runs on its own Virtual Account by default.

Assuming my websites are called
MyWebsite1
and
MyWebsite2
and my computer is called
MyServer1
what would be the fully qualified names of the Virtual Accounts these two websites are running on, that I can use to refer to them from another machine?

Also, if I were to use this connection string to connect to a SQL Server instance on the network from either of my two websites, would the Integrated Security feature work with these Virtual Accounts?

Dim connectionstring as string = "Data Source=MyServer2\SQLEXPRESS; initial catalog=My_Database; Integrated Security=True; Connection Timeout=3600"

If it works, would the connection granted to these Virtual Accounts be under a least priviledge model? Because as I understand, these Virtual Accounts themselves cannot access network resources, but they use the credentials of the local computer instead.

If not, can I use another minimum priviledge limited domain user account to connect to the database server that I've created for the purpose? If yes, what would my connectiong string look like?

I know that's a lot of nested if statements, but please bear with me. :D
Would appreciate the help. :)

IIS 7 getting installed as Local System on Windows Server 2008 R2

2013-04-27T17:49:59.553-04:00

I have been reading up on security in Windows Server, and the documentation on msdn seems to suggest to use the new service accounts - Managed Service Account or Virtual Account to install services like IIS or SQL Server to run using low privilege accounts specially designed to run these kind of services. At any rate, they shouldn't be running as Local System, which is a high privilege account.
I also read that under 2008 R2, the installation procedure automatically creates a virtual account for a particular service using the same name for the virtual account as the service name.
However, I tried installing the Web Server (IIS) role on Windows Server 2008 R2 twice now, and it installs the Web Server Service (World Wide Web Publishing Service - W3SVC) running path to executable C:\Windows\system32\scvhost.exe -k iissvcs to run as Local System.
The first time, I was logged in as the administrator on the local machine. When it didn't work, I removed the role entirely, and then logged in to the system as the domain administrator, and it still installed it as Local System instead of a Virtual Account.
What gives?

I need to change it to run as either an MSA or a VA. Before I take a decision on which one to use, I just need one more piece of advice.
The idea behind the web server is that the web server itself (or the service account it is running on) does not need to access any network resources. I understand that to access any network resources, it is recommended to use MSA instead of VA, because the VA tends to act as Local System when accessing the network. But doesn't this in itself pose a security risk that could be exploited if the system were to be compromised, even if network resources are not to be accessed in the original design of the system?
Also, the plan is that the web server will impersonate other domain users when trying to access SQL Server, which is located on a different server within the network. Does this impersonation still count as accessing network resources by the service account IIS is running on? Or by impersonating, does the underlying service account not actually access any network resources, but all the accessing is done only by the account being impersonated?

So all said, which type would be better for my requirement - MSA, or VA?

WPI 4.5 on Windows 8, crashes on start everytime

2013-05-18T12:56:53.333-04:00

Any time I run WPI 4.5 it immediately flashes ".. has stopped working". This is a recent problem as I already used it to install a whole host of software and files previously.

I have no log, but do have the tmp file:

(modules excluded)

Dump Summary
------------
Dump File:   WERE447.tmp.mdmp : Z:\temp\WERE447.tmp.mdmp
Last Write Time:   18/05/2013 13:50:24
Process Name:   WebPlatformInstaller.exe : C:\Program Files\Microsoft\Web Platform Installer\WebPlatformInstaller.exe
Process Architecture:   x86
Exception Code:   0xE0434F4D
Exception Information:   An exception came from the CLR
Heap Information:   Not Present

System Information
------------------
OS Version:   6.2.9200
CLR Version(s):   2.0.50727.6400

Modules
-------
Module Name   Module Path   Module Version
-----------   -----------   --------------
WebPlatformInstaller.exe   C:\Program Files\Microsoft\Web Platform Installer\WebPlatformInstaller.exe   7.1.1863.0

I have tried unisrtalling, repairing reinstalling. All to no avail.

Edit---

I managed to get a .Net Error and copied that below:

See the end of this message for details on invoking
just-in-time (JIT) debugging instead of this dialog box.

************** Exception Text **************
System.TypeLoadException: Method 'get_AsyncWaitHandle' in type 'ThreadMethodEntry' from assembly 'System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' does not have an implementation.
   at System.Windows.Forms.Control.MarshaledInvoke(Control caller, Delegate method, Object[] args, Boolean synchronous)
   at System.Windows.Forms.Control.BeginInvoke(Delegate method, Object[] args)
   at System.Windows.Forms.Form.OnLoad(EventArgs e)
   at System.Windows.Forms.Form.OnCreateControl()
   at System.Windows.Forms.Control.CreateControl(Boolean fIgnoreVisible)
   at System.Windows.Forms.Control.CreateControl()
   at System.Windows.Forms.Control.WmShowWindow(Message& m)
   at System.Windows.Forms.Control.WndProc(Message& m)
   at System.Windows.Forms.ScrollableControl.WndProc(Message& m)
   at System.Windows.Forms.ContainerControl.WndProc(Message& m)
   at System.Windows.Forms.Form.WmShowWindow(Message& m)
   at System.Windows.Forms.Form.WndProc(Message& m)
   at System.Windows.Forms.Control.ControlNativeWindow.OnMessage(Message& m)
   at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m)
   at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)


************** Loaded Assemblies **************
mscorlib
    Assembly Version: 2.0.0.0
    Win32 Version: 2.0.50727.6400 (Win8RTMGDR.050727-6400)
    CodeBase: file:///C:/Windows/Microsoft.NET/Framework/v2.0.50727/mscorlib.dll
----------------------------------------
WebPlatformInstaller
    Assembly Version: 4.0.0.0
    Win32 Version: 7.1.1863.0
    CodeBase: file:///C:/Program%20Files/Microsoft/Web%20Platform%20Installer/WebPlatformInstaller.exe
----------------------------------------
System.Windows.Forms
    Assembly Version: 2.0.0.0
    Win32 Version: 2.0.50727.6402 (Win8RTMGDR.050727-6400)
    CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089/System.Windows.Forms.dll
----------------------------------------
Microsoft.Web.PlatformInstaller.UI
    Assembly Version: 4.0.0.0
    Win32 Version: 7.1.1863.0
    CodeBase: file:///C:/Program%20Files/Microsoft/Web%20Platform%20Installer/Microsoft.Web.PlatformInstaller.UI.DLL
----------------------------------------
System
    Assembly Version: 2.0.0.0
    Win32 Version: 2.0.50727.6401 (Win8RTMGDR.050727-6400)
    CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089/System.dll
----------------------------------------
System.Drawing
    Assembly Version: 2.0.0.0
    Win32 Version: 2.0.50727.6401 (Win8RTMGDR.050727-6400)
    CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Drawing/2.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll
----------------------------------------
Accessibility
    Assembly Version: 2.0.0.0
    Win32 Version: 2.0.50727.6387 (Win8RTM.050727-6300)
    CodeBase: file:///C:/Windows/assembly/GAC_MSIL/Accessibility/2.0.0.0__b03f5f7f11d50a3a/Accessibility.dll
----------------------------------------

************** JIT Debugging **************
To enable just-in-time (JIT) debugging, the .config file for this
application or computer (machine.config) must have the
jitDebugging value set in the system.windows.forms section.
The application must also be compiled with debugging
enabled.

For example:

<configuration>
    <system.windows.forms jitDebugging="true" />
</configuration>

When JIT debugging is enabled, any unhandled exception
will be sent to the JIT debugger registered on the computer
rather than be handled by this dialog box.

Github missing from WebMatrix

2013-05-18T12:35:21.007-04:00

<div>

Recently made a copy of one of my sites to play with and I have come to the realization there is no Nuget link.

It goes from View, Launch(VS), Galleries, to Snippets.

How do I get it back in there?

</div>

Webdav bug or feature ? - Unable to rename if changing capitalization only

2013-05-15T15:57:04.19-04:00

Hi everyone,

I've come across some interesting behaviour when manipulating a Webdav resource published on an IIS server. I've observed the behaviour with Windows 2003/IIS 6 and Windows 2008R2/IIS 7.5.

Renaming files and folders work fine in most cases, however I try a rename which changes capitalization only - for example attempting to rename a folder testfoldera to TestFolderA, I get the error message "unable to read from source file or disk"

Can anyone comment on whether this is expected behaviour (i.e a feature) or a bug with Webdav? In Windows you are able to perform such a rename in Explorer even though Windows does not use capitalization in differentiating files - like Unix does.

Admittedly this isn't a use case that would come up much but where application users are concerned - there's always one!

php problem

2013-05-17T11:28:55.207-04:00

hello,

i have a php website and it was host in linux server i move it to my windows server.

the website is open and workfine but when i try to click on any link it's give me error 404.

i noticed that the file in url is not exist with the file so i think it's like premalink idea in wordpress.

so anyway to runt it?

thanks.

How to remove/customize html text displayed with response code 302 ?

2013-05-17T14:04:35.783-04:00

Hi,

I have an application using FastCGI in IIS6.

We are migrating this application to IIS7.5, and we have problems with it : when our FastCGI application answers a 302 code, IIS7 sends a small html text in content :

<head><title>Document Moved</title></head>
<body><h1>Object Moved</h1>This document may be found <a HREF="...">here</a></body>

The problem is that the http client gets this html page as content, and then the redirected content.

How can i ask IIS7.5 not to answer some html text into the 302 response (only headers, and Content-Length=0) ??

Thank you very much !

Thomas

IIS 8 Express and Biztalk 2013

2013-05-17T18:32:11.507-04:00

Can anyone tell me if IIS8 Express and Biztalk 2013 are compatible running on the same machine (Windows 7 SP1)?

Thanks!