Hi, My web application runs on Windows Server 2008 and IIS 7. During penetration testing, we found that it was possible to determine the existence of directories within the web root on the system through messages returned by the access control code. This could enable an attacker to target particluar...

Hi, I know how to protect my static (HTML) pages in IIS6, and how to do it using the IIS7 Integrated Pipeline, but how can I protect my HTML pages from unauthorised access in IIS7 when running in Classic Mode? It's an ASP.NET site using forms authentication. Thanks!

Is it possible to combine NTLM authentication and forms authentication on IIS7? The setup I need to achieve is internal users authenticated via integrated windows authentication and external users authenticated via forms. So only external users have to login via a form; internal, already authenticated...

I've had a look at that website and it seems to be a way to enforce both Integrated Windows Authentication and Forms Based Authentication one after the other in order to authenticate. Can that technique be modified to use only 1 kind of authentication either windows or forms based on the user's...

I had changed cache setting on all websites to try to reduce the amount of memory being used by IIS which backfired. It caused my working perfectly phone to nolonger connect to my server for email and even after I set cache back to what it was in the beginning it still does not connect and when I log...

Hi everyone, I'm new to this forum and look forward to learning more about IIS and it's members. I have a IIS 7 security problem ( at least I think it is a security issue) that have been trying to solve and create a virtual directory, yet unsuccessful!! I'm hoping to find the solution with...

I have recently found a rootkit on my computer through AVG and am wondering how to get this thing off. I tried to get AVG to delete it but it said it cannot. I heard you can re-install windows vista and also restore default settings but I am not sure if that deletes everything and I'll have to get...

Londons_lion007 Thursday, April 23, 2009 9:32:35 AM 0 votes Hi I have windows 2003 server with sp2 installed and using IIS 6.0 with .net framework 1.1.4322. When i try to view web page through iis i get following err. Can someone suggest me solution. I have gi ven full trust to all level Enterprise,...

I have an application that is using LDAP only with Single Sign On running on a windows 2003 server, running iis 6.0 My Domain Functional Level: Windows 2003 Server, Forest Functional level: Windows 2003 My web.config authentication is set: <authentication mode="Windows"/> <identity...

Hi, I am facing this problem 2nd time the first time i faced this problem and i had formatted my system to solve this problem can some body help me. the below error facing when i am trying to view preview the .asp page from dreamweaver. HTTP 500.100 - Internal Server Error - ASP error Internet Information...