Securing .html pages using .NET Framework 2.0 on IIS 6.0

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Tod Birdsall (nospam1_at_netsalad.com)
Date: 01/26/05 

Date: 26 Jan 2005 15:55:26 -0800

Hi All,

I am trying to secure non-ASP.NET files (i.e. .html, .pdf) in an
application running on IIS 6.0, Win2K3 using the .NET Framework 2.0.

What has worked in the past using .NET Framework 1.1 on IIS 6.0 is the
following :
1. Open IIS
2. Right click website, choose Properties.
3. Click "Home Directory" tab.
4. Click "Configuration" button. This opens "Application Configuration"
window.
5. Click on an any entry that uses the .NET Framework ISAPI filter.
6. Copy the "Excecutable" path (i.e.
C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll)
7. Click "Cancel".
5. Click "Add" to add a new Application Extension.
6. Paste the path into the "Executable" text box.
7. Type in ".html" into the "Extension" textbox.
8.Click "OK" until you are out of the properties window.

Now ".html" extensions should be handled by the ASP.NET worker process,
so if authentication is turned on, .html files will be protected from
anonymous users.

Taking the same steps on the same Win2K3 server for .NET Framework 2.0,
I run into problems. I browse to a ".html" page and get a generic "The
page cannot be displayed" error. At the bottom of the page was the text
"Cannot find server or DNS Error Internet Explorer". All of the .aspx
pages I went to work just as they should. I have double checked the
path. I have tried other file extensions such as ".pdf" with the same
results as the ".html". The Execution path I am using is
"C:\WINDOWS\Microsoft.NET\Framework\v2.0.40607\aspnet_isapi.dll".

I have also tried using impersonation using the machine.config
<processModel> tag. I used System and the Administrator user accounts
to no avail.

Has anyone run into this problem and found a solution?
Thank you.

Tod Birdsall
http://tod1d.blogspot.com

Relevant Pages

  • Re: IE works and Mozilla failes in Hyperlinks
    ... This is due to the fact that the HTML files you are linking to do not ... It is always unpredictable how a browser (any ... add an extension of ".html" or ".htm" to your web pages. ... > apperas at the browser window with the buttons hypelinks. ...
    (microsoft.public.frontpage.client)
  • [kde] Re: Desktop effects with intel 945
    ... plain text only, but last time I did not consciously send the HTML ... window translucency can be useful at times as ... However, if you want, you /can/ actually switch to compiz for KDE's window ...
    (KDE)
  • [kde] Re: KDE 4.6.0 and nvidia drivers
    ... Please don't post in HTML to the mailing lists. ... the nv driver is deprecated. ... But I refused to turn off effects like window translucency ... general tab under Desktop Effects and defaults to "normal". ...
    (KDE)
  • Re: 2 Qs re JS scripting
    ... on injecting your code into the window closing event of the A.HTML window ... a local html file, I will call this A.HTML, A.HTML will be opened as an MDI ... window within the main app. ... to the hosting application. ...
    (microsoft.public.scripting.jscript)
  • Re: 2 Qs re JS scripting
    ... I have an application that presents it user interface in an MDI OLE'd IE6 ... a local html file, I will call this A.HTML, A.HTML will be opened as an MDI ... window within the main app. ...
    (microsoft.public.scripting.jscript)