5,779 reputation
11221
bio website blogs.technet.com/tristank
location Sydney, Australia
age 39
visits member for 4 years, 9 months
seen Nov 19 at 10:14

Nothing to see here.


Oct
26
revised Why use Kerberos instead of NTLM in IIS?
added 165 characters in body
Oct
26
answered Task Manager shows more worker processes than the max set
Sep
30
awarded  Explainer
Sep
2
awarded  Good Answer
Sep
1
answered Get list of physical paths of all websites on IIS
Aug
10
comment IIS7.5 - application pool account versus user account - which account needs write permission?
Procmon (live.sysinternals.com/procmon.exe) is an excellent tool for watching what's actually happening and who it's happening as!
Jul
29
revised Don't see Failed Request Tracing in IIS 7 Manager
added 346 characters in body
Jun
26
comment 500 - Internal server error until someone logs into the server
Sounds like something on the box requires a loaded user profile. You could try ticking "Load User Profile" for whichever App Pool is running the main site (usually DefaultAppPool, but I guarantee you that vanilla unmodified servers don't behave like this), and see if that gives (whatever it is) (whatever it wants). You could also try turning on Failed Request Tracing and tracing status code 500 after a reboot, though that might be iffy if the app pool's failing to load.
Jun
26
comment Inconsistent IIS access across subnets/sites
What if you bypass nlb?
Jun
23
revised IIS DefaultAppPool hangs when other sites are exercised
edited title
Jun
23
answered IIS DefaultAppPool hangs when other sites are exercised
Jun
23
comment IIS 7.5 Windows authentication not working externally
And I agree - sounds like you've identified the problem as being the firewall. You could use an SSL tunnel to hide the traffic from it, but otherwise, just fix the firewall.
Jun
23
comment IIS 7.5 Windows authentication not working externally
@Rubanov, you're mistaken. The only form of Windows Auth usable across a firewall is NTLM, and that uses 2 401-driven round trips before the successful 200. See serverfault.com/questions/254813/…
Jun
23
answered IIS 7.5 Permissions Confusion
Jun
8
comment Timer_EntityBody, Timer_ConnectionIdle and Connection Closed Unexpectly
You need to debug your web service. You can use Failed Request Tracing to help identify what it thinks it's doing on long-running requests and/or any 400 errors.
Jun
8
comment IIS 7.5 Permissions Confusion
Overcomplicating things. If you want specific permissions for a folder, you set them. If permissions for the folder you're inheriting are OK, then that's arguably OK. You simply set NTFS permissions to whatever you want them to be, for whomever you need them. Keep in mind that IUSR is Mr Anonymous, and IIS_IUSRS is "worker process identities", which aren't necessarily the same thing. So, you'd just create a folder, set permissions for IUSR to Read only, maybe Admins to Write, and ensure IIS_IUSRS has Read access as well (so web.configs can be enumerated and read). Done!
Jun
6
comment How to get a list of all folders that have write permission for IUSR account?
Just to add to the fun: you may need to enumerate virtual directories beneath the "master folder" as well, as they're considered part of that namespace.
Jun
6
comment How to find out “UNKNOWN” site in ISA 2000
Maybe look at your logs to work out what the commonalities are.
Jun
6
comment Trying to list out Web services, Web sites, and App Pools - Windows Server 2003
He's saying you wrote the wrong word, as in a typo. CSCRIPT IISWEB.VBS or IISAPP.VBS works fine.
Jun
6
comment IIS 7.5 Permissions Confusion
Also: The default IIS anonymous user account is IUSR, unless you've reset Anonymous Auth to be the App Pool account, in which case it'll be securable as "IIS AppPool\AppPoolName" for that website/app pool.