Hot answers tagged

53

Also check this answer from here: Cannot manually edit applicationhost.config The answer is simple, if not that obvious: win2008 is 64bit, notepad++ is 32bit. When you navigate to Windows\System32\inetsrv\config using explorer you are using a 64bit program to find the file. When you open the file using using notepad++ you are trying to open it using a 32bit ...


28

Facepalm New VPS box, means default behaviour. i.e. "Hide file type extensions for known types". When I turned that off, I discovered my file was actually named index.html.txt. Renamed it to index.html and problem solved.


24

Open regedit Navigate to, or create the keys as necessary: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server Create/Edit the value Enabled, type DWORD, value "0" Reboot Notes: The same proceedure applied to key names PCT 1.0, SSL 2.0, SSL 3.0, TLS 1.0. In newer versions of Windows some of these are ...


19

The correct answer was staring me right in the face, though I didn't know it at the time. Apparently this little "question mark" notation on the icon is simply to alert the site admin to the fact that these bindings exist. As it turns out, you can have multiple bindings of the same protocol (say to different host aliases) and the icon will be just a globe, ...


19

First of all you need to think about your network design. It would be good to use at least one DMZ in oder to protect the internal network. A good Windows system for beeing public would be Windows Server 2008 R2 if you do not want to purchase the new 2012 Server. We have at least four windows based webservers which work perfectly as webservers, all based on ...


19

You are almost certainly running into the Windows loopback check that was introduced with IIS 5.1. This is a security feature to avoid certain types of reflection attacks against the system. Microsoft has a KB article describing workarounds. They basically boil down to modifying the registry to either disable the loopback check, or to allow certain ...


15

I was having this issue as well and it was related to the data ports being selected by IIS. I set it up to use a specific port range but when my client tried to use passive mode it showed that it was using the wrong port. This article describes the method for calculating which port it is using. e.g. 227 Entering Passive Mode (x1,x2,x3,x4,y1,y2) The IP ...


15

In my case: The Event Log was empty. web.config wasn't corrupt - verified by using same on local machine / using inetmgr Finally... Checking IIS logs showed a request like this ...Chrome/57.0.2987.133+Safari/537.36 500 19 5 312 The key being: sc-status sc-substatus sc-win32-status 500 19 5 which with some googling pointed me to the ...


15

Try this: change: <error statusCode="401" subStatusCode="2" prefixLanguageFilePath="" path="/not_restricted/401.htm" responseMode="ExecuteURL" /> to <error statusCode="401" subStatusCode="2" prefixLanguageFilePath="" path="not_restricted\401.htm" responseMode="File" /> With the response mode 'File' IIS just loads the content of that file ...


14

I had the same problem - turned out we'd just run out of disk space.


14

No, the certificate will give an error in browsers that it is for the wrong domain. That's the whole point of certificates - to verify that the site is the one it claims to be. Part of that is verifying the URL of the site matches the one on the certificate. Depending on where you got the certificate, they may allow you to revoke the one for the old ...


13

The easiest way to make changes in Microsoft SChannel protocols and ciphers (including cipher ordering) is to use IIS Crypto which is a completely free tool that can be downloaded without any kind of annoying registration requirements. The tool manipulates the registry keys under the covers however it does so in a controlled, proven and safe way. We use it ...


13

I had the same problem on a fresh install of Windows 2012. However, the freb.xsl file was present in the same folder as the event XML file. To get it to show the 'nice interface' I had to add "about:internet" to the IE11 trusted sites list, as discussed here: http://forums.iis.net/p/1147605/1862016.aspx


13

One way is to use the Url-Rewrite extension. You can then use a rule like this to catch all requests: <system.webServer> ... <rewrite> <rules> <rule name="SiteDown" stopProcessing="true"> <match url=".*" /> <action type="CustomResponse" statusCode="503" ...


12

The context of the answer is that IIS 7 doesn't actually care about the certificate binding. IIS 7 only ties websites to one or more sockets. Each socket being a combination of IP + port. Source: IIS7 add certificate to site from command line So, what we want to do is do certificate re-binding on the OS layer. The OS layer takes control of the SSL part, so ...


11

I know this is an old question, but in IIS 7.5 you can deny by user agent if you use Request Filtering. In IIS, go to the website you wish to apply the filter and then in the right pane, click the Request Filtering icon. (you may have to enable this feature through server manager). Click the Rules tab, and then along the far right list, select "Add ...


11

I think the following article will show you how to configure delegation at the host level. http://www.iis.net/learn/manage/remote-administration/configuring-remote-administration-and-feature-delegation-in-iis-7 This type of functionality would be nice for those who still have to manage legacy IIS too.


11

Well you have a mess on your hands. You should really look into a Plesk or something similar, Based on your statement "but these decisions are made way above my head and my voice has been heard and ignored in the matter." It really sounds like you are trying to make mountains out of mole hills. With that being said you are going to run into major issues ...


11

This post escalated while I wrote it, here's the take-away bullets TL;DR Increase the size of your page file (shooting from the hip I'd say to at least 40GB, much more if you can afford the disk capacity and I/O, but read the article at the bottom) Increase the frequentHitThreshold and frequentHitTimePeriod values(review the Web Service Cache performance ...


11

Server 2008 R2/Windows 7 introduced TLS 1.1 and TLS 1.2 support for Windows, and was released prior to the attacks that made TLS 1.0 vulnerable, so it's probably just a matter of TLS 1.0 being the default because it was the most widely used TLS version at the time Server 2008 R2 was released (July, 2009). Not sure how you'd know for sure, or find out "why" ...


11

Here is the web.config. http://go.microsoft.com/fwlink/?LinkId=235367. The following attributes can be set on the <httpRuntime> tag. <system.Web> <...


10

Look at the config you provided if all files are where they are suppose to be do the following. For windows Server 2008 / 2008 R2 First Ensure that the .NET Framework 4.5.1 is installed Run the following command from an elevated command prompt: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_regiis.exe -i Then Open Internet Information Services ...


9

Just to follow up on this for others that could not resolve it using the above solution, I had experienced a similar problem whereby the server was delivering the wrong certificate for HTTPS connections to a website with a host header value. In my case, it turned out to be that the binding was set to receive connections from * instead of the actual server ...


9

The reason is that you have two web sites targeted on the same physical folder. And there exists an inheritance in web.config. http://vmsomething is the parent and http://vmsomething/my_application_virtdir is its child. The child web.config inherits all elements from its parent. And the web.config usually is not designed to work in such scenario. You can ...


9

When IIS automatically generates a machine key, it is stored in HKEY_CURRENT_USER. Therefore, to share auto-generated machine keys, web apps must be running as the same user. Details are in this blog post. The relevant excerpt is: The base machine key is stored in the registry in the following location: HKCU\Software\Microsoft\ASP.NET\4.0.30319.0\...


8

You need to match every request, and then use conditions to filter it to just your specific URLs: <rule name="Old Site = Image1" stopProcessing="true"> <match url="^(.*)$" /> <conditions logicalGrouping="MatchAny"> <add input="{REQUEST_URI}" pattern="^(.*)image/aaa.gif$" /> <add input="{REQUEST_URI}" ...


8

IIS on Windows is version-locked. This means that 1 version of IIS ships with a specific version of Windows and that's it. If you want to change IIS, you need to change your version of Windows. This matrix might help IIS 5 - Windows 2000 Server IIS 6 - Windows Server 2003 IIS 7 - Windows Server 2008 IIS 7.5 - Windows Server 2008 R2 IIS 8 - ...


8

If one's using a .NET application with IIS, one can also use an app_offline.htm file to shut down an application and prevent pages from being requested with an appropriate 503 error code.


8

I assume you took the string: Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:13.0;+GomezAgent+3.0)+Gecko/20100101+Firefox/13.0.1 from the IIS logs. In the logs space characters are represented as plus (+) characters. The real User Agent string is: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0; GomezAgent 3.0) Gecko/20100101 Firefox/13.0.1 so removing the + from ...


8

New Relic says themselves that they use the .Net profiling API. https://docs.newrelic.com/docs/dotnet/new-relic-net-installation#trouble The .NET agent instruments application and system code using BCI (byte code injection). This is done by registering the New Relic agent with the CLR (Common Language Runtime) as a "profiler." The CLR calls out to ...


Only top voted, non community-wiki answers of a minimum length are eligible