Problem: a specific Global Security Group can not load ASP pages (but can load HTML pages). Goal: allow access to the secure website files and directories according to Global Group membership. This is a medical industry customer, so HIPAA compliance is mandatory (i.e. file access and restrictions must...

Hi Everyone, I'm trying to secure a Shared Hosting Environment on a Windows 2003 Server / IIS 6 My approche so far: 1) created an Application Pool User for each of the Site (all members of the IIS_WPG Group) 2) created an Application Pool for each Site and assigned them to the Sites 3) assigned the...

Hi all, I am running IIS 6 on Server 2003 and want to stop lesser encryption levels from accessing websites, its basically things like IE4, firefox 1 etc. Is it possible to block specific browsers from accessing a website? Thanks for your help. Martin.

Hi I'm having a problem where form content ceases to post to an Anonymous page, after starting with the Anonymous page, going to an NTLM authenticated page and back again. I have a machine in production for which this is actually working (running IIS5.0), but I have to migrate to an IIS6.0 machine...

Hi, I have to deploy ASP.Net 2.0 Webservice on the Windows Server 2003 (having IIS 6.0). I have given only [Read] and [Script Only] Permissions. I have checked, i am still able to CREATE, DELETE folders and files. i was thinking that, i should not be able to CREATE/DELETE files / folders as guest account...

Bound by timescales, and wanting to password protected one directory on our website I setup the website to allow Anonymous access and Windows Authentication. I then created a Windows User and gave them file permissions to the folder I wanted to restrict and removed the IIS User. This all worked fine...

Hi Everybody, For my project I need to collect all the security settings informations (key/value) for IIS6.0 I want to know the list of IIS6.0 security related files and their locations for both default as well as .Net. And also need to collect registry entries related to security settings for IIS6.0...

IIS6.x (win2k3) » Hm... I got a min server and a backup server inside a VirtualPC. The files from the main server goes into the "host" machine which hosts the backup server inside a VirtualPC. Since the "Shared Folders" feature is SUPER slow, I have shared the files in the network...

All, I have a site which includes a WMV encoded video. When I navigate directly to the movie, I am prompted for login credentials, even though the site (and file) is set to allow anonymous access. I've never come across this before - any ideas of what's going on and how to get around it? I'm running...

Change the directory security of clients folder to Basic Authentication or Integrated windows Authentication in IIS. Enabling directory security does not automatically configure your Web server to authenticate users. You must set appropriate NTFS permissions to the clients folder as well. The client...