Questions tagged [iis]
IIS is Internet Information Services, the web server included with Microsoft's Windows Server operating systems. This is a generic tag. Wherever possible please use a *version-specific* tag, such as [iis-7], [iis-7.5], etc.
5,367
questions
0
votes
1
answer
1k
views
What is the proper way to use IIS to forward the REMOTE_USER header to Tomcat?
I am trying to set up SSO with IIS 10 and Tomcat 9. I want to use Windows Authentication in IIS and pass the authenticated username to Tomcat. I had this working with Tomcat 8.5, however after ...
1
vote
0
answers
568
views
IIS 10: is there some way to trick it into letting me use an IP address as the host name of an HTTPS binding?
I have a cluster of IIS servers sitting behind a load balancer at a vendor. The vendor's load balancer determines if the server is functional by accessing a special monitoring page on the server, and ...
0
votes
1
answer
2k
views
Hitting dead end installing GoDaddy SSL cert into IIS 10 Windows 2016
Battling this all morning. Our server has an existing GoDaddy SSL cert set to expire. We renewed the cert at godaddy, received the requisite download and proceeded to install.
Fastidiously following ...
1
vote
1
answer
7k
views
Windows update causes IIS Express to fail with ERR_HTTP2_PROTOCOL_ERROR
I've been building reactjs apps on a windows machine for the past year, running the Visual Studio IIS test server for debugging / testing.
I just installed a windows update pack, rebooted, and my ...
0
votes
1
answer
473
views
Can't access app / IIS external from VM but can access from within VM
We have an app / IIS server that runs on a Windows Server 2016 machine that we are able to access the app's functionality from within the VM(http://localhost) but we are not able to access the app ...
1
vote
2
answers
7k
views
How to uninstall IIS 10 on Windows Server 2016?
I cannot disable/remove IIS component also its child components.
How to uninstall IIS 10 on Windows Server 2016?
0
votes
1
answer
221
views
Virtual Machine, Pagefile Enabled or Dissabled?
I have 4-5 virtual machines running IIS on 2 host's. I know that the page-file must be enabled on the host machine but I'm not sure about the virtual machines. Regardless of IOps consumption my ...
1
vote
0
answers
85
views
Enforce kerberos authentication for each IIS site without individual site developers being able to disable it
We have a IIS server with multiple sites that are managed by different teams. We want to standardize on and enforce Kerberos autentication for all sites with each site having an individual AD group ...
1
vote
0
answers
162
views
How to set permissions on virtual network directory when application pool uses LOCALSYSTEM?
I have a Windows 10 web server development machine (let's call it: "DEVELOPMENTMACHINE") where the application pool uses LOCALSYSTEM. Without using LOCALSYSTEM, the Windows text-to-speech ...
0
votes
1
answer
847
views
FoundryVTT server behind an IIS reverse proxy CORS issues
I have a FoundryVTT server in a FreeNAS jail. I mostly followed these instructions to get it to work. I had a previous problem, which I solved and it works fine now for <= v0.7.9. However, >= v0....
5
votes
2
answers
5k
views
Bulk install new certificates on multiple Windows Server 2016+ endpoints
I have begrudgingly been updating our purchased wildcard certs manually for years and I've had enough now that I've got over 100 web and client servers. The servers are mostly independent and spread ...
0
votes
0
answers
448
views
Add SSL for web application without domain registered
I have a .NET winform application that connects to a remote database on a VPS (windows 2016 server), the connection is made through OpenVpn
because it was necessary for certain functions to be used on ...
0
votes
0
answers
511
views
how can find list of the sites connecting to the app pool using appcmd.exe
I can see a list of site and list of app pool separately.
but how can I find wich site using from the app pool.
e.g:
we have an app pool with name: app1
i want to send command to find how sites ...
0
votes
1
answer
914
views
how to get current physicalPath site using appcmd.exe
we want get current physicalPath of the site using appcmd.exe.
how to identify physicalPath of site via site name or app pool name.
5
votes
2
answers
11k
views
How can I get the list of app pool using appcmd.exe
we using the below command to get the list of the site added in is:
%systemroot%\system32\inetsrv\AppCmd.exe list sites
but the above command can not take a list of app pools related to the site.
I ...
0
votes
1
answer
351
views
how can create a directory, in add site command using appcmd.exe?
When I am using the appcmd.exe for creating a website, I need a physical Path address in the command. How can I create directory when I am running this address:
%systemroot%\system32\inetsrv\AppCmd....
0
votes
1
answer
1k
views
IIS Output cache doesnt seem to cache static files
I have the configured caching below and Ive also used other scenarios but I cant get my JS files to show in the cache with the below commands. So I dont think they are caching for my .js files. Is ...
0
votes
1
answer
402
views
IIS URL Rewrite does not work on a complex URL
I have 2 URL redirection rules:
<rewrite>
<rules>
<clear />
<rule name="al - helyek/al (kieg)" enabled="true" ...
1
vote
1
answer
2k
views
Windows Server 2012: how to prevent IIS from choosing SHA-1 for connections?
The problem: IIS on Windows 2012 picks SHA-1 algorithm when the client uses SHA-1 certificate. Even though the server-side certificate is SHA-256. So Chrome/Edge don't work.
On analogous Windows 2016 ...
0
votes
1
answer
811
views
reverse proxy doesn't work with .svc url?
here's my attempt to do a reverse proxy using url rewrite in IIS from mysubdomaintarget.mytargetdomain.com to mysubdomainreal.myrealdomain.com
<configuration>
<system.webServer>
...
0
votes
0
answers
783
views
CRL revocation check fails yet can retrieve file
I have an IIS server on a 2016 box (IIS v10 it says) which is being used to authenticate a unix server via a certificate. I have confirmed connectivity to the internal CRL server, I can telnet to it, ...
0
votes
1
answer
103
views
Block IIS GUI sites configuration change for hardening
I am trying to find the configuration settings for this hardening on Windows 2019:
Block IIS sites configuration change from the IIS GUI, even for administrators.
The sites web.config change should ...
2
votes
1
answer
921
views
IIS10 not saving (all) configuration details to site's web.config
The web.config on a fresh IIS install contains the sites configuration details, except for <ipSecurity>. However, the (site local) IP restrictions work fine and can be edited through the IIS ...
0
votes
1
answer
1k
views
How to setup Handler Mapping for IIS 10 to serve mkv files?
I have Virtual Directory set up successfully. It serves most common file types, but not .mkv. I've tried adding new Handler Mappings via IIS Manager, but to no avail. I'm choosing the "Add ...
1
vote
2
answers
2k
views
Force Remote IIS Manager to connect through TLS 1.2
I've setup a new IIS 10 on Windows Server 2019 Core 1809 (ltsc).
I have setup the wmsvc service and confirmed that it is working. I was able to connect from a Remote Administration Server (Windows ...
4
votes
3
answers
19k
views
IIS: Can connect to website via http but not https
I can connect to my site via http but not via https.
In FireFox I get:
Secure Connection Failed. An error occurred during a connection to www.example.com. PR_CONNECT_RESET_ERROR
In Chrome I getL
...
0
votes
0
answers
516
views
IIS get real client IP Address when behind a AWS Elastic load balancer
I have a IIS server behind a AWS Elastic load balancer. I want retrieve the real client ip address set into x-forwarded-for header from AWS Elastic load balancer.
I have found this setting for enable ...
0
votes
1
answer
480
views
Azure Web App identified target web site is using IIS 10 and detected that it is out of date - how to change
Azure Web App identified target web site is using IIS and detected that it is out of date - how to change
A security scan of a web app running windows has been identified as a High vulnerability. ...
0
votes
1
answer
388
views
Multiple Domains/IPs for single website via IIS
Here is my situation.
A factory of ours in China can no longer access our site that we use to record and prepare orders for production and shipping. We suspect that it has been blocked for whatever ...
1
vote
0
answers
2k
views
How to set the HTTP headers "X-Forwarded-Context" or "X-Forwarded-Prefix" with IIS reverse proxy
I try to configure a reverse proxy in the IIS. This required to set some HTTP headers. I was able to add the follow HTTP headers:
X-Forwarded-Proto
X-Forwarded-Port
X-Forwarded-Host
This is possible ...
1
vote
3
answers
1k
views
Implicitly allow requests in IIS from valid hostname
I have a few publicly accessible IIS servers and sites (personal and corporate), these hosts have own domains/subdomains, and all legit access to these https sites happen through domains.
Almost all ...
0
votes
0
answers
40
views
Website works remotely but not on the server itself when called by domain
I am using Windows Server 2019 and in IIS 10 I have created a website and I have bound it to both: "localhost" and "mydomain.com" on port 80.
mydomain.com works correctly from any ...
2
votes
0
answers
932
views
Python Flask App on IIS - Updating Active Directory Attributes on Behalf of User
I've posted this on stackoverflow, but posting it here as I want some help from folks that are familiar with kerberos delegation and IIS. I am currently trying to figure out how to get my flask app to ...
1
vote
0
answers
377
views
IIS: Kerberos authentication only works from local machine
I'm setting up an IIS application on a server within my domain. I configured SPN's and settings to allow windows authentication to work with kerberos and Single Sign On, and everything works fine on ...
2
votes
2
answers
57
views
Why aren't my websites configured in IIS using the correct certificates?
My sites are similarly named:
hi.api.domain.tld
hi.test.domain.tld
The .api domain is my api and .test is the webapp that consumes the api.
I've got a certificate for each one but they don't seem to ...
0
votes
0
answers
396
views
Issue with api request from linux
I have issue with http bearer auth json post to api.
Used apps or and php methods
wget
console curl
php curl
file get contents
Sucessfull scenarios - post request
Computer connected to same network ...
1
vote
0
answers
70
views
Why does it sometimes take 10+ seconds for an image to go live via public URL on my Windows Server 2019 (IIS 10) machine?
I have a PHP script that uploads image files to a directory on my Windows 2019 server. It saves the images in a directory set up as a virtual directory in IIS for my website/service. Specifically, it ...
0
votes
1
answer
1k
views
How to fix Weak TLS 1.2 Encryption
I have a requirement to disable below weak TLS ciphers in Windows Server 2016. I tried to reasearch and it says "The Microsoft SCHANNEL team does not support directly manipulating the Group ...
0
votes
1
answer
1k
views
Exchange 2016 ECP failing - 503 Service Unavailable
My Exchange server is really suffering at the moment. I do not know what has happened but when I connect /ECP I get 503 errors. I can view the login page successfully, but after a successful login all ...
0
votes
0
answers
73
views
SSL for Subdomains
We are using two different server to host website(WordPress - Linux) and Web Application(Sub Domains - IIS). We are using SSL Generated by LetsEncrpt for website and tried SSL brought from Godaddy. ...
0
votes
1
answer
275
views
How can I configure IIS (in-domain web server) to use HTTPS if it has no connection to the internet?
I have a web server that runs Windows Server 2016 and has IIS with some ASP.Net applications hosted.
The server is part of a domain, and all machines accessing these applications are also part of the ...
1
vote
1
answer
5k
views
Exchange 2016 OWA and ActiveSync 503 error
We are getting intermittent 503 errors for OWA and ActiveSync with Exchange 2016. The errors only seem to affect accounts in databases which are not active on the front end server so there appears to ...
-1
votes
3
answers
877
views
Purchased SSL Cert but can't attach to a website
I purchased a wildcard SSL cert from GoDaddy. I completed the email verification phase, then they provided me with a "generated-csr.txt" file and a "generated-private-key.txt" file....
1
vote
1
answer
549
views
Why can't my internal IP addresses be granted access from IIS 10 IP Address and Domain Restrictions?
Why can't my internal IP addresses be granted access from IIS 10 IP Address and Domain Restrictions?
Backstory:
I have implemented IIS 10's IP Address and Domain Restrictions to block access to one ...
1
vote
0
answers
284
views
IIS Rewrite URL not appending StringQuery
I'm trying to rewrite my URL
FROM https://localhost/details.html?page=2
TO https://localhost/license
When I use Redirect, it works perfectly when I request the URL https://localhost/license, but the ...
1
vote
1
answer
564
views
Deploying .NET 5 to IIS Server with SSL disabled
I am currently working on an .NET 5 & SignalR application and in localhost everything seems to be working fine. When I try to deploy it to IIS pre-production Server which doesn't have a SSL ...
1
vote
0
answers
431
views
How would you connect an Apache Reverse Proxy to a remote server via HTTPS?
I have an Apache Reverse Proxy set up that I'm trying to route to a remote IIS web site via https and its IP address. The website in question is a .Net5.0 website that uses Microsoft's Azure ...
0
votes
1
answer
950
views
What does ClientCancel mean in the HTTPERR log
In our IIS log files, I noticed on occasion there are pageviews missing. Further investigating this issue I took a look at the %systemroot%\System32\LogFiles\HTTPERR log files. Here I found that the ...
0
votes
0
answers
25
views
Windows 12 server NON .COM domain TXT records cannot be found
I have a windows server running a website for truckersbrew.coffee and cannot see any of the TXT records using external tools available on the internet. I can browse to the website on the internet ...
0
votes
2
answers
486
views
How to create a certificate with SAN and specific encryption in Windows?
I want to create a certificate with:
Subject Alternative Name
SHA256 as hash algorithm
On a Windows 10 Ent machine, both the above options are not available by default when creating a certificate. ...