Previous Next

Thread: Security Issue with IIS6.0 and ASP.NET 3.5

Last post 07-29-2008 11:18 PM by qbernard. 3 replies.

Average Rating Rate It (5)

RSS

Page 1 of 1 (4 items)

Sort Posts:

  • 07-29-2008, 1:27 PM

    • PCalvinClark
    • Not Ranked
    • Joined on 07-29-2008, 5:15 PM
    • Posts 2
    • PCalvinClark

    Security Issue with IIS6.0 and ASP.NET 3.5

    I'm new to administering IIS with ASP.NET, so please bear with me.  I recently added a new website to a Windows 2003 server (logged on with local admin privs) and configured it for autonomous access.  From IIS Manager on the server, I can browse to the application.   However, if I try to open the application from another machine (not having either local or domain admin privs), I get an error 403.  I tried changing security privileges on the website folder and subfolders in Windows Explorer but the changes seemed to have no impact.  Where should I be looking to resolve this issue?

    Thanks in advance!

  • 07-29-2008, 3:08 PM In reply to

    • joelangley
    • Top 50 Contributor
    • Joined on 07-20-2008, 2:37 PM
    • Posts 82
    • joelangley

    Re: Security Issue with IIS6.0 and ASP.NET 3.5

    So this is interesting...usually I hear 404 with asp.net and 3.5 :) Have you tried to use FileMon?

  • 07-29-2008, 3:25 PM In reply to

    • PCalvinClark
    • Not Ranked
    • Joined on 07-29-2008, 5:15 PM
    • Posts 2
    • PCalvinClark

    Re: Security Issue with IIS6.0 and ASP.NET 3.5

    Sorry, I'm not familiar with FileMon.  How do I find out more about it?

    Thanks for responding!

    Paul

  • 07-29-2008, 11:18 PM In reply to

    • qbernard
    • Top 10 Contributor
    • Joined on 03-25-2003, 10:12 PM
    • Malaysia
    • Posts 2,218
    • IIS MVPs
    • qbernard

    Re: Security Issue with IIS6.0 and ASP.NET 3.5

    403 is forbidden requests from IIS perspectives, might not related to NTFS permissions which is more relevant for 401.3

    So please double check the substatus code of the requests.

    For filemon, just google it and you will get
    http://technet.microsoft.com/en-us/sysinternals/bb896642.aspx

     

    Cheers,
    Bernard Cheah
Page 1 of 1 (4 items)
Page view counter