Hi Everyone, I'm trying to secure a Shared Hosting Environment on a Windows 2003 Server / IIS 6 My approche so far: 1) created an Application Pool User for each of the Site (all members of the IIS_WPG Group) 2) created an Application Pool for each Site and assigned them to the Sites 3) assigned the...

Hi. I would like to ask whether it is possible to enable both Integrated Windows Authentication and at the same time requiring a client certificate to access a site. The idea behind this is to be able to access the Logon prompt of Integrated Authentication only if the user has a valid certificate. I...

Hi all, I am running IIS 6 on Server 2003 and want to stop lesser encryption levels from accessing websites, its basically things like IE4, firefox 1 etc. Is it possible to block specific browsers from accessing a website? Thanks for your help. Martin.

Hi. I'm running xp pro sp2 installed is IIS 5.1. Also Sql Server 2005 and Visual Studio 2005. I was wondering about the security implications involved in the course of action I took. I tried to start http ://localhost and got a log on screen. Not knowing the credentials required, I turned on anonymous...

Hi. I have a server with Win2k3 with IIS6.0 and AD, and now I need advice on how to go about setting up the following scenario: - A site www.example.com has two subdirs, subdir1 and subdir2. - In AD I have two groups, group1 and group2, which users have been added to. - Users log into the subdirs based...

Hi, The use of this script at pointing to nihaorr1.com is only the latest method of attack used by this attacker. This guy has been hacking at a clients web site for a long time and usually does so through various proxy servers. For those looking for a tool to view IIS log files, check out this program...

Hi I'm having a problem where form content ceases to post to an Anonymous page, after starting with the Anonymous page, going to an NTLM authenticated page and back again. I have a machine in production for which this is actually working (running IIS5.0), but I have to migrate to an IIS6.0 machine...

Hi, I have to deploy ASP.Net 2.0 Webservice on the Windows Server 2003 (having IIS 6.0). I have given only [Read] and [Script Only] Permissions. I have checked, i am still able to CREATE, DELETE folders and files. i was thinking that, i should not be able to CREATE/DELETE files / folders as guest account...

Bound by timescales, and wanting to password protected one directory on our website I setup the website to allow Anonymous access and Windows Authentication. I then created a Windows User and gave them file permissions to the folder I wanted to restrict and removed the IIS User. This all worked fine...

Hi Everybody, For my project I need to collect all the security settings informations (key/value) for IIS6.0 I want to know the list of IIS6.0 security related files and their locations for both default as well as .Net. And also need to collect registry entries related to security settings for IIS6.0...