Hi everyone, I'm new to this forum and look forward to learning more about IIS and it's members. I have a IIS 7 security problem ( at least I think it is a security issue) that have been trying to solve and create a virtual directory, yet unsuccessful!! I'm hoping to find the solution with...

Problem: a specific Global Security Group can not load ASP pages (but can load HTML pages). Goal: allow access to the secure website files and directories according to Global Group membership. This is a medical industry customer, so HIPAA compliance is mandatory (i.e. file access and restrictions must...

Hi Everyone, I'm trying to secure a Shared Hosting Environment on a Windows 2003 Server / IIS 6 My approche so far: 1) created an Application Pool User for each of the Site (all members of the IIS_WPG Group) 2) created an Application Pool for each Site and assigned them to the Sites 3) assigned the...

Hi. I would like to ask whether it is possible to enable both Integrated Windows Authentication and at the same time requiring a client certificate to access a site. The idea behind this is to be able to access the Logon prompt of Integrated Authentication only if the user has a valid certificate. I...

Hi all, I am running IIS 6 on Server 2003 and want to stop lesser encryption levels from accessing websites, its basically things like IE4, firefox 1 etc. Is it possible to block specific browsers from accessing a website? Thanks for your help. Martin.

Hi. I'm running xp pro sp2 installed is IIS 5.1. Also Sql Server 2005 and Visual Studio 2005. I was wondering about the security implications involved in the course of action I took. I tried to start http ://localhost and got a log on screen. Not knowing the credentials required, I turned on anonymous...

Hi. I have a server with Win2k3 with IIS6.0 and AD, and now I need advice on how to go about setting up the following scenario: - A site www.example.com has two subdirs, subdir1 and subdir2. - In AD I have two groups, group1 and group2, which users have been added to. - Users log into the subdirs based...

Hi, The use of this script at pointing to nihaorr1.com is only the latest method of attack used by this attacker. This guy has been hacking at a clients web site for a long time and usually does so through various proxy servers. For those looking for a tool to view IIS log files, check out this program...

Hi I'm having a problem where form content ceases to post to an Anonymous page, after starting with the Anonymous page, going to an NTLM authenticated page and back again. I have a machine in production for which this is actually working (running IIS5.0), but I have to migrate to an IIS6.0 machine...

Hi, I have to deploy ASP.Net 2.0 Webservice on the Windows Server 2003 (having IIS 6.0). I have given only [Read] and [Script Only] Permissions. I have checked, i am still able to CREATE, DELETE folders and files. i was thinking that, i should not be able to CREATE/DELETE files / folders as guest account...