Re: Need help on windows server 2003

anonymous_at_discussions.microsoft.com
Date: 05/11/04


Date: Tue, 11 May 2004 02:28:16 -0700

So youre telling me that there is no way to get it to
happen automatically?

there MUST be a way couse the cmpany has no time to
develop AND change the run option every time they create
a new project.

>-----Original Message-----
>As a part of security lockdown, IIS6 only serves static
files by default.
>Scripts like ASP will not work until you enable it to
run on IIS6 AND enable
>"Scripts" on the vdir/app that actually needs to run
scripts. This is
>totally by design -- secure by default. You have to
configure and unlock
>IIS functionality.
>
>This approach is far better than prior IIS versions,
which had all the bells
>and whistles enabled (so users would never need
to "unlock" any
>functionality as they grow more sophisticated) -- but
history has shown that
>this helps hackers more than end users.
>
>The end result of the "hostile Internet" is that it's a
little more hassle
>now for you to have to enable the "Scripts" permission
when you add a
>project, but I hope you realize this is for your own
benefit. There is no
>way that IIS6 will ever automagically enable "Scripts"
permission when you
>add a project remotely -- there is much potential
security vulnerability
>with what you're asking.
>
>--
>//David
>IIS
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>//
><anonymous@discussions.microsoft.com> wrote in message
>news:b31f01c4372e$f5321560$a501280a@phx.gbl...
>Some time ago i set up a web/sql server for my company,
>yet last week we were testing it and we found out that
>IIS cannot show .asp pages (just non script and non app
>pages)
>
>i found that i had to manually set the run permissions on
>scripts only or run scripts and applications.
>
>how can i configure IIS to automatically do so when i
>remotely add a project (with visual interdev)
>
>and if someone knows the awnser to this problem please
>give a detailed walkthrough couse i am not that familiar
>with windows server 2003.
>
>thanks in advance,
>
>Tars Talsma
>Businesscorner system administrator
>
>
>.
>



Relevant Pages

  • Need help on windows server 2003
    ... Some time ago i set up a web/sql server for my company, ... IIS cannot show .asp pages (just non script and non app ... scripts only or run scripts and applications. ... and if someone knows the awnser to this problem please ...
    (microsoft.public.inetserver.iis)
  • Re: Need help on windows server 2003
    ... Doesn't make sense from a security point of view. ... Thus, the process that is creating the project on IIS would need to do it, ... >Scripts like ASP will not work until you enable it to ... >totally by design -- secure by default. ...
    (microsoft.public.inetserver.iis)
  • Re: Will Linux become as vulnerable as MS ??
    ... But people sometimes infected by viruses from files ... Then anyone with a basic understanding of shell scripts could write one ... > Apache, and despite having several rather nasty holes in Apache, or it's ... > the vile record that IIS holds in spreading malware. ...
    (comp.os.linux.security)
  • Re: Will Linux become as vulnerable as MS ??
    ... >> Linux, each distro is a little different, and even within the distro, ... > Then anyone with a basic understanding of shell scripts could write one ... >> Apache, and despite having several rather nasty holes in Apache, or it's ... >> the vile record that IIS holds in spreading malware. ...
    (comp.os.linux.security)
  • Re: Page can not be displayed...
    ... :>> I've create a virtual directory usr-cgi met link naar e:\cgi ... :>> It works all well when I run simple scripts, ... With any files you access using Perl in an IIS CGI environment, ... Perl process appears to be running with a current directory of c:\winnt\temp ...
    (comp.lang.perl.misc)