Secure a Website page - goes live on Friday Aug 13!!

From: Scochaik (silkenhons_at_accusport.com)
Date: 08/12/04


Date: Thu, 12 Aug 2004 18:15:33 -0400

I have a website I am serving with IIS on an SBS 2003 Premium machine.
http://www.accusport.com

There is a particular page that marketing wanted to make secure when you
click on the link for that page.

I figured the best way to do this was to create a virtual site within the
website in IIS. I could then control permissions from there. I opened the
Properties for the new Virtual Site and disabled anonymous access, checking
Windows Authenticated mode. I then created an account for this section as
well as added myself and this account to the access permission list. I left
Admin there, but removed everyone else.

Testing the new page: I was able to browse to the page, it popped up an
authentication dialog box. I put in my credentials and it allowed me in the
page...many of you are probably snickering cause you know what I am going to
tell you...I put in happy/happy for user and password and it allowed me in
to the page. This is not what I call secure, so I have disable the site
until I can get this working.

I am supposed to make this live tomorrow, so any help in this matter would
be greatly appreciated. I am expecting something else to go awry since it
is Friday the 13th!!



Relevant Pages

  • Removing Requirment for an SSL connection
    ... I have SBS 2000 running with IIS and Exchange and went through this ... We set the default website up to require an SSL connection because we didn't ... Office Scan) so of course this now required a secure connection to connect ...
    (microsoft.public.inetserver.iis)
  • Removing Requirement for SSL
    ... I have SBS 2000 running with IIS and Exchange and went through this ... We set the default website up to require an SSL connection because we didn't ... Office Scan) so of course this now required a secure connection to connect ...
    (microsoft.public.inetserver.iis.security)
  • Recognizing a secure connection
    ... I am using ISA and IIS to publish a website. ... several pages of the site to be secure. ...
    (microsoft.public.inetserver.iis.security)
  • folder access
    ... windows server 2003 with IIS 6.0, I have two users who maintain their own ... website and I'm not sure the best way (secure) to grant them access to make ...
    (microsoft.public.inetserver.iis)
  • Re: Permission Problems SBS2003 R1
    ... website on the SBS server? ... Default permissions and user rights for IIS 6.0 ... Step 3: Please check the permissions in IIS manager: ... Step 4: Re-running CEICW on SBS server: ...
    (microsoft.public.windows.server.sbs)