61
There are several things you can do:
1. Application Initialization
You can use Application Initialization Module which comes in-box with IIS 8.0
you can have something like this in your web.config
<applicationInitialization
doAppInitAfterRestart="true" >
<add initializationPage="/" />
</applicationInitialization>
This will send ...
37
We had the same error on a brand new server.
The reason was not the default IIS security policy, stored in applicationHost.config, as suggested by the other answer (although we checked that). The reason was that we installed IIS without support for ASP.NET (an ASP.NET 4.5 role)!
When we installed the missing support for ASP.NET, our application just ...
28
First to specifically answer your question;
"How can i change that to DHE_RSA or ECDHE_RSA?"
The easiest solution to this is to download IIS Crypto and let it do the hard work for you.
IIS Crypto
In order to use DHE_RSA or ECDHE_RSA you'll need to re-order the cipher suite preferences in the bottom left pane of the IIS Crypto window. I currently set ...
25
I wouldn't consider it a good practice. When most people usually set up things like "nightly iisresets" or "nightly reboots," generally, it's because they are running an application that is poorly-written and leaks resources, to the point where the entire system may become unstable unless we restart the application, the service, or even entire system. The ...
18
Open your IIS manager and select the directory you want to protect.
Under the "IIS" section select "Authentication".
Disable "Anonymous Auth".
Enable the desired Auth method (usually "Basic Auth") and it will be valid for this directory only.
Add a User account.
Left click directory in IIS, Edit Permissions..., Security, Edit, Add, enter a user from your ...
16
There is a simple way to do, tick the "Require Server Name Indication" in "Bindings...".
Reference:
https://stackoverflow.com/a/27791857/3260008
15
Ok, the problem was I trusted Web Platform...
Installing defaults settings for Web Deploy 3.5 didn't install all required components like:
You need to install "IIS Deployment Handler" to be able to use it.
13
Are you 100% sure he is not testing with a higher or lower version of TLS, packet resets normally are attributed to the application not knowing what to do with it.
12
You write that you can't figure out how to retrieve:
Physical Path
is directly accessible through the physicalPath noteproperty
App Pool Association
doesn't make sense, Applications are assigned to app pools, directories themselves are not
Site Name
You already know this ($Site.name)
Credentials
I assume you just want the username if present
These ...
12
Hello and Sorry for bumping a bit old thread.
AFAIK Applicure DotDefender is not compatible with Windows Server 2012 R2.
I tried it With Server 2012 R2 vs IIS 8.5 it isn't working anymore.
Here is whitepaper (that is written by me) regarding how to Protect IIS 8.5(or any Windows Web srv) using Apache~ mod_proxy + DotDefender 5.13.
Sorry, it is written in ...
9
I had the same problem and I found out that it require to run IIS Manager with administrator permissions. Try to run IIS Manager as Administrator and it should solve the problem. Or try to access the manager console from Computer Management (mmc), which must be run with Administrator privileges.
9
To clarify because there seems to be some confusion here, you need to click on the IIS server - not the site.
Add your certificate. Then click on the site that will use it and bind the certificate to that site.
8
Yes, totally outdated, in fact it was never ever required or good practice. If you had to do this there was something wrong with your application.
Recycling application pools is a much cheaper operation as it just shuts down one process and starts another one. Iisreset restarts the whole IIS with all its components.
AppPool recycling also gives you much ...
7
Yes, you just create a Virtual Directory off of site.com. You can give it a path on a local physical drive or an UNC path to a remote resource (assuming you have the appropriate permissions).
In IIS Manager:
Right-click the site.com site and choose Add Virtual Directory...
In the Alias box enter uploads
In the Physical Path box enter the path to your ...
7
i do this in IIS 8
$testpool = get-item iis:\apppools\$iisAppPoolName;
$testpool.processModel.userName = $un;
$testpool.processModel.password = $pw;
$testpool.processModel.identityType = 3;
$testpool | Set-Item
$testpool.Stop();
$testpool.Start();
Works for me :)
7
I can ping6 the IP address noted above from my office.
PING 2001:4ba0:cafe:c54::1(2001:4ba0:cafe:c54::1) 56 data bytes
64 bytes from 2001:4ba0:cafe:c54::1: icmp_seq=1 ttl=115 time=41.2 ms
64 bytes from 2001:4ba0:cafe:c54::1: icmp_seq=2 ttl=115 time=33.4 ms
64 bytes from 2001:4ba0:cafe:c54::1: icmp_seq=3 ttl=115 time=34.8 ms
When I access the ...
6
Below are the Classic ASP Debugging Properites default settings:
All you need to change here is Send Errors To Browser = True
This should give you the real error in a browser on the server.
To see that error in a remote computer click on the Error Pages icon for the site in IIS Manager and click Edit Feature Settings in the Actions pane on the right. ...
5
The most likely problem is Windows Firewall. Configure it to allow port 8080 traffic. It allows port 80 by default when IIS is installed as a role, but it doesn't automatically configure itself if you change the port.
5
DNS has nothing to do with this. You need to edit the IIS site in question to accept requests for that host header.
Using IIS Manager, open up the Sites node and choose the site you want the host header to work on. In the Actions pane, click Bindings. Then choose the binding you want to add a host header to and click Add.
Type in a host header, for example ...
5
Here's how I got my IIS fixed after getting random 403's all over.
5
I think if you change the IP address for the somedomain.com binding to "All unassigned" rather than 10.10.0.1, it will stop getting in the way of your SNI sites [surprisingly].
4
I know this is an older topic, but I had the same question as epotter regarding where to find the option. I discovered that it's actually part of the IIS role in Server Manager's 'Add Roles and Features', Under 'Web Server', 'Web Server', 'Security'. You should find Basic Authentication as a check box.
Dirk
4
Adding this attribute in the httpRuntime section may help you:
<configuration>
<system.web>
<httpRuntime ... relaxedUrlToFileSystemMapping="true" .../>
</system.web>
</configuration>
Gets or sets a value that indicates whether the URL in an HTTP request is required to be a valid Windows file path.
More information ...
4
You should disable anonymous authentication for the directory if there is no need to have anonymous users. This will take care of the problem
4
You need a new certificate for test.domain.com -- you can't add it to an existing certificate that has already been issued. If you'll be doing much else with subdomains, you might consider getting a wildcard certificate for *.domain.com.
4
Found out. The login failures are logged into eventlog system.
They can be retrived by searching for event id 4625 on event viewer.
3
Newer versions of IIS run under the ApplicationPoolIdentity account. If you go into the advanced settings for the application pool, you can try changing the identity under the process model section to NetworkService(What iis used to use, considered less secure now) or you can change the permissions to a different account or you could manually set the ACL's ...
3
After speaking with my web host (Rackspace), they determined it was an incorrect setting on my NIC driver. TCP Checksum Offload was enabled and my truncation problems went away after disabling it.
More info here:
http://social.technet.microsoft.com/Forums/windows/en-US/7d129406-0602-4705-bf1f-7408d9f03846/tcp-checksum-incorrect-while-trying-to-ftp-file?...
3
Ah, Anton from the comments section of the post says "For those who are missing the configuration option in IIS make sure you’ve installed the “Web Deploy 3.0 for Hosting Servers” – You can search for it in the Web PI tool."
And indeed there is such an option in the Web Platform Installer search, now updated for WebDeploy version 3.5
Then, you use IIS's "...
3
I had the same issue. I fixed with openssl
openssl pkcs12 -export -in my.crt -inkey my.key -certfile my.bundle -out my.pfx
Than i imported to IIS 8.5
Only top voted, non community-wiki answers of a minimum length are eligible