28
votes
Change Key exchange mechanism in IIS 8
First to specifically answer your question;
"How can i change that to DHE_RSA or ECDHE_RSA?"
The easiest solution to this is to download IIS Crypto and let it do the hard work for you.
IIS ...
- 1,253
25
votes
Accepted
Is running a nightly IISReset outdated?
I wouldn't consider it a good practice. When most people usually set up things like "nightly iisresets" or "nightly reboots," generally, it's because they are running an application that is poorly-...
- 55.2k
21
votes
Multiple ssl certificates with one ip and same port but different host headers (IIS 8)
There is a simple way to do, tick the "Require Server Name Indication" in "Bindings...".
Reference:
https://stackoverflow.com/a/27791857/3260008
- 311
13
votes
Accepted
Disable TLS 1.2 stops RST packets
Are you 100% sure he is not testing with a higher or lower version of TLS, packet resets normally are attributed to the application not knowing what to do with it.
- 414
12
votes
Accepted
applicure dotdefender ISAPI filter causing pdf issue
Hello and Sorry for bumping a bit old thread.
AFAIK Applicure DotDefender is not compatible with Windows Server 2012 R2.
I tried it With Server 2012 R2 vs IIS 8.5 it isn't working anymore.
Here is ...
- 136
10
votes
Accepted
Missing "Server Certificates" icon in IIS8
To clarify because there seems to be some confusion here, you need to click on the IIS server - not the site.
Add your certificate. Then click on the site that will use it and bind the certificate ...
- 116
8
votes
Is running a nightly IISReset outdated?
Yes, totally outdated, in fact it was never ever required or good practice. If you had to do this there was something wrong with your application.
Recycling application pools is a much cheaper ...
- 13.8k
7
votes
IIS 8: Setting the application pool username is ignored
i do this in IIS 8
$testpool = get-item iis:\apppools\$iisAppPoolName;
$testpool.processModel.userName = $un;
$testpool.processModel.password = $pw;
$testpool.processModel.identityType = 3;
$testpool ...
7
votes
Accepted
IPv6 website not working in IIS 8
I can ping6 the IP address noted above from my office.
PING 2001:4ba0:cafe:c54::1(2001:4ba0:cafe:c54::1) 56 data bytes
64 bytes from 2001:4ba0:cafe:c54::1: icmp_seq=1 ttl=115 time=41.2 ms
64 ...
- 115k
6
votes
Accepted
IIS 8 Show Classic ASP Errors in Browser
Below are the Classic ASP Debugging Properites default settings:
All you need to change here is Send Errors To Browser = True
This should give you the real error in a browser on the server.
To see ...
- 13.8k
5
votes
CNAME or A Record to Site under www root?
DNS has nothing to do with this. You need to edit the IIS site in question to accept requests for that host header.
Using IIS Manager, open up the Sites node and choose the site you want the host ...
- 32.4k
5
votes
5
votes
IIS 8 - Default SSL Site Breaks SNI
I think if you change the IP address for the somedomain.com binding to "All unassigned" rather than 10.10.0.1, it will stop getting in the way of your SNI sites [surprisingly].
- 223
4
votes
Trailing dots in url result in empty 404 page on IIS
Adding this attribute in the httpRuntime section may help you:
<configuration>
<system.web>
<httpRuntime ... relaxedUrlToFileSystemMapping="true" .../>
</system.web>
&...
- 141
4
votes
What role does "App Pool Identity" play for an Application Pool?
You are seeing two things, that are commonly confused in ASP.NET:
"user identity" - Authentication of a user account has nothing to do with the account or identity that actually runs under both IIs ...
- 141
4
votes
How do I enable Basic Authentication for IIS 8 in Windows Server 2012
I know this is an older topic, but I had the same question as epotter regarding where to find the option. I discovered that it's actually part of the IIS role in Server Manager's 'Add Roles and ...
- 41
4
votes
IIS8 not serving static content, even though Static Content role is installed
On the Authentication pane select Anonymous Authentication and then Edit.... If you see something like "IUSR" there try simply changing that to the Application pool identity option. Worked for me with ...
- 41
4
votes
SSL certificate for CNAME
You need a new certificate for test.domain.com -- you can't add it to an existing certificate that has already been issued. If you'll be doing much else with subdomains, you might consider getting a ...
- 7,983
4
votes
Accepted
How to log authentication failures on IIS
Found out. The login failures are logged into eventlog system.
They can be retrived by searching for event id 4625 on event viewer.
- 531
4
votes
Hide Physical Path in IIS HTTP Error
I had to adjust the tag:
<httpErrors errorMode="DetailedLocalOnly" />
This is inside the "system.webserver" tag. Mine was previously set to "Detailed"
https://docs.microsoft.com/en-us/iis/...
- 141
4
votes
How to Remove Microsoft-HTTPAPI/2.0 Header on IIS 8 and 10
If the response's Server header returns "Microsoft-HttpApi/2.0", it means that the HTTP.sys is being called instead of IIS. Exploits and port scans use this as a means of fingerprinting an IIS server ...
- 151
4
votes
Accepted
IIS IP Address and Domain Restrictions with Proxy Mode Enabled denying allowed x-forwarded-for
Both your IP and your x-forwarded-for IP(s) must be allowed entries for the request to be allowed.
With "Proxy Mode" on, the server first checks that the presented IP (the proxy's IP) is ...
- 56
3
votes
Accepted
IIS 8 SSL Stops working Windows 2012 Core
Turns out this was a registry entry that was somehow removed. I can provide some details and I'm sure there will be questions but I won't be able to answer all of them without going into large detail ...
- 585
3
votes
Accepted
Centrally configuring IIS 7+ log files
These settings are stored in the <logFile> element of the <siteDefaults> element in %SystemRoot%\System32\InetSrv\config\applicationHost.config.
I'm not aware of any "stock" ...
- 141k
3
votes
Accepted
Run IIS 8 on Windows 2008 Server R2
The full version of IIS 8.0 is only available on Server 2012 (and Windows 8). That's how it goes with IIS - a new major version of IIS for a new major version of Windows. R2 OS releases get a ".5" ...
- 53.5k
3
votes
Accepted
Trigger Email Alert on KillW3wp Event
The KillW3wp doesn't support additional actions that I am aware of.
Fret not, there is an event log for the action.
Product: Internet Information Services
ID: 5025
Source: Microsoft-Windows-WAS
...
- 15.5k
3
votes
Is running a nightly IISReset outdated?
I would like to offer an alternative view on this. Whilst I agree that you shouldn't do it because you are trying to solve an issue such as resource leaks, we randomly destroy machines during office ...
- 139
3
votes
MS Webdeploy V3 encryptPassword correct usage
Well, I just learned why you need a password. (For those who don't know how, I've shown an example command line at the bottom.)
According to one of the examples on this page, the encryptPassword ...
- 231
3
votes
IIS Admin Service won't start - error 87: The parameter is incorrect
Finally found the solution. Removing "Web Server (IIS) Support role" (including all IIS 6's) through Server Manager > Remove Roles and Features Wizard and adding those back resolved my issue. Ob ...
- 141
3
votes
Is it possible to change the SSL binding order in IIS?
The administration tool does not behave consistently enough to allow you to order the bindings.
The reason for this, I think, is that your bindings are supposed to be unambiguous enough to not ...
- 31
Only top scored, non community-wiki answers of a minimum length are eligible