Hot answers tagged

28 votes

Change Key exchange mechanism in IIS 8

First to specifically answer your question; "How can i change that to DHE_RSA or ECDHE_RSA?" The easiest solution to this is to download IIS Crypto and let it do the hard work for you. IIS ...
  • 1,253
25 votes
Accepted

Is running a nightly IISReset outdated?

I wouldn't consider it a good practice. When most people usually set up things like "nightly iisresets" or "nightly reboots," generally, it's because they are running an application that is poorly-...
  • 55.2k
21 votes

Multiple ssl certificates with one ip and same port but different host headers (IIS 8)

There is a simple way to do, tick the "Require Server Name Indication" in "Bindings...". Reference: https://stackoverflow.com/a/27791857/3260008
  • 311
13 votes
Accepted

Disable TLS 1.2 stops RST packets

Are you 100% sure he is not testing with a higher or lower version of TLS, packet resets normally are attributed to the application not knowing what to do with it.
12 votes
Accepted

applicure dotdefender ISAPI filter causing pdf issue

Hello and Sorry for bumping a bit old thread. AFAIK Applicure DotDefender is not compatible with Windows Server 2012 R2. I tried it With Server 2012 R2 vs IIS 8.5 it isn't working anymore. Here is ...
10 votes
Accepted

Missing "Server Certificates" icon in IIS8

To clarify because there seems to be some confusion here, you need to click on the IIS server - not the site. Add your certificate. Then click on the site that will use it and bind the certificate ...
  • 116
8 votes

Is running a nightly IISReset outdated?

Yes, totally outdated, in fact it was never ever required or good practice. If you had to do this there was something wrong with your application. Recycling application pools is a much cheaper ...
7 votes

IIS 8: Setting the application pool username is ignored

i do this in IIS 8 $testpool = get-item iis:\apppools\$iisAppPoolName; $testpool.processModel.userName = $un; $testpool.processModel.password = $pw; $testpool.processModel.identityType = 3; $testpool ...
7 votes
Accepted

IPv6 website not working in IIS 8

I can ping6 the IP address noted above from my office. PING 2001:4ba0:cafe:c54::1(2001:4ba0:cafe:c54::1) 56 data bytes 64 bytes from 2001:4ba0:cafe:c54::1: icmp_seq=1 ttl=115 time=41.2 ms 64 ...
  • 115k
6 votes
Accepted

IIS 8 Show Classic ASP Errors in Browser

Below are the Classic ASP Debugging Properites default settings: All you need to change here is Send Errors To Browser = True This should give you the real error in a browser on the server. To see ...
5 votes

CNAME or A Record to Site under www root?

DNS has nothing to do with this. You need to edit the IIS site in question to accept requests for that host header. Using IIS Manager, open up the Sites node and choose the site you want the host ...
  • 32.4k
5 votes

iis 8 - 403 access is denied

Here's how I got my IIS fixed after getting random 403's all over.
  • 165
5 votes

IIS 8 - Default SSL Site Breaks SNI

I think if you change the IP address for the somedomain.com binding to "All unassigned" rather than 10.10.0.1, it will stop getting in the way of your SNI sites [surprisingly].
  • 223
4 votes

Trailing dots in url result in empty 404 page on IIS

Adding this attribute in the httpRuntime section may help you: <configuration> <system.web> <httpRuntime ... relaxedUrlToFileSystemMapping="true" .../> </system.web> &...
  • 141
4 votes

What role does "App Pool Identity" play for an Application Pool?

You are seeing two things, that are commonly confused in ASP.NET: "user identity" - Authentication of a user account has nothing to do with the account or identity that actually runs under both IIs ...
  • 141
4 votes

How do I enable Basic Authentication for IIS 8 in Windows Server 2012

I know this is an older topic, but I had the same question as epotter regarding where to find the option. I discovered that it's actually part of the IIS role in Server Manager's 'Add Roles and ...
4 votes

IIS8 not serving static content, even though Static Content role is installed

On the Authentication pane select Anonymous Authentication and then Edit.... If you see something like "IUSR" there try simply changing that to the Application pool identity option. Worked for me with ...
4 votes

SSL certificate for CNAME

You need a new certificate for test.domain.com -- you can't add it to an existing certificate that has already been issued. If you'll be doing much else with subdomains, you might consider getting a ...
  • 7,983
4 votes
Accepted

How to log authentication failures on IIS

Found out. The login failures are logged into eventlog system. They can be retrived by searching for event id 4625 on event viewer.
  • 531
4 votes

Hide Physical Path in IIS HTTP Error

I had to adjust the tag: <httpErrors errorMode="DetailedLocalOnly" /> This is inside the "system.webserver" tag. Mine was previously set to "Detailed" https://docs.microsoft.com/en-us/iis/...
4 votes

How to Remove Microsoft-HTTPAPI/2.0 Header on IIS 8 and 10

If the response's Server header returns "Microsoft-HttpApi/2.0", it means that the HTTP.sys is being called instead of IIS. Exploits and port scans use this as a means of fingerprinting an IIS server ...
4 votes
Accepted

IIS IP Address and Domain Restrictions with Proxy Mode Enabled denying allowed x-forwarded-for

Both your IP and your x-forwarded-for IP(s) must be allowed entries for the request to be allowed. With "Proxy Mode" on, the server first checks that the presented IP (the proxy's IP) is ...
3 votes
Accepted

IIS 8 SSL Stops working Windows 2012 Core

Turns out this was a registry entry that was somehow removed. I can provide some details and I'm sure there will be questions but I won't be able to answer all of them without going into large detail ...
  • 585
3 votes
Accepted

Centrally configuring IIS 7+ log files

These settings are stored in the <logFile> element of the <siteDefaults> element in %SystemRoot%\System32\InetSrv\config\applicationHost.config. I'm not aware of any "stock" ...
3 votes
Accepted

Run IIS 8 on Windows 2008 Server R2

The full version of IIS 8.0 is only available on Server 2012 (and Windows 8). That's how it goes with IIS - a new major version of IIS for a new major version of Windows. R2 OS releases get a ".5" ...
  • 53.5k
3 votes
Accepted

Trigger Email Alert on KillW3wp Event

The KillW3wp doesn't support additional actions that I am aware of. Fret not, there is an event log for the action. Product: Internet Information Services ID: 5025 Source: Microsoft-Windows-WAS ...
  • 15.5k
3 votes

Is running a nightly IISReset outdated?

I would like to offer an alternative view on this. Whilst I agree that you shouldn't do it because you are trying to solve an issue such as resource leaks, we randomly destroy machines during office ...
  • 139
3 votes

MS Webdeploy V3 encryptPassword correct usage

Well, I just learned why you need a password. (For those who don't know how, I've shown an example command line at the bottom.) According to one of the examples on this page, the encryptPassword ...
  • 231
3 votes

IIS Admin Service won't start - error 87: The parameter is incorrect

Finally found the solution. Removing "Web Server (IIS) Support role" (including all IIS 6's) through Server Manager > Remove Roles and Features Wizard and adding those back resolved my issue. Ob ...
3 votes

Is it possible to change the SSL binding order in IIS?

The administration tool does not behave consistently enough to allow you to order the bindings. The reason for this, I think, is that your bindings are supposed to be unambiguous enough to not ...

Only top scored, non community-wiki answers of a minimum length are eligible