Quantcast
Channel: All Forums
Viewing all 27852 articles
Browse latest View live

IIS Application showing 403 - Forbidden: Access is denied some times

$
0
0

Hi All,

I have issue with IIS Web Application ,which is some time works fine and some shows 403 - Forbidden: Access is denied Error screen.

What could be the reason such failure ? can body has such issue..Please help me or suggest me to get out this kind of issues.

Thanks in Advance.


Can't access site from outside

$
0
0

I created a site with IIS 8.5, let's say it's my.mycompany.pt. I also created na internal alias for the site (via internal IP). The creation of the site was last week.

However, even though I can access my site internally (via internal IP), I can't access it with my.mycompany.pt. Google Chrome gives the error DNS_PROBE_FINISHED_NXDOMAIN.

So, it seems that the DNS are still unaware of my site.

Is there any site configuration (in IIS) that I should change to make my site public? Or, must I contact somebody to publicize my site to DNSs?

Custom Rewrite Provider not showing in "Add Provider..." list

Does Management UI extension work via remote connection?

$
0
0

Hi there,

If I want to implement my custom IIS Manager Module (using .NET) that extends Management UI (let's say brings a custom ModulePageInfo) how can I make it work when connecting to remote IIS on another box? Is it even possible?

The idea is that I want UI Extension where I can right-click on a website to do some stuff. But I want to install it once on my local machine (to extend my local IIS Manager), and then connect to remote IIS (machines) and use it against remote web sites.

Best Wishes,

- Oleg

IIS SEO Toolkit Not Crawling Sites w/ TLS 1.0 Disabled?

$
0
0

I can't seem to crawl sites that have TLS 1.0 disabled, e.g. lelabofragrances.com

...But I don't know of anOTHER site w/ TLS 1.0 disabled to try, so I can't confirm it's all non-TLS 1.0-friendly sites, or just that one.

I already have this update, which might allow TLS 1.1/1.2 for IIS SEO Toolkit?
https://support.microsoft.com/en-us/help/3140245/update-to-enable-tls-1-1-and-tls-1-2-as-a-default-secure-protocols-in

Any thoughts?

More to the point: do you know of any other sites w/ TLS 1.0 disabled I could try to crawl?

Quick way to see which protocols are enabled on a site:

https://cryptoreport.websecurity.symantec.com/checker/

Thanks!

-Dan

powershell monitor if requests are occomulating under an appPool

$
0
0

Hi

our Dev team have 20 upplications under default website on IIS 10, Server 2012R2

sometimes one of the applications is stuck.

in IIS when I go to worker processes and click AppPoolname, I see under the stuck appPool many requests.

I need to

1. monitor if many requests are occomulating under an appPool

2. recycle the problematic appPool.

I only managed to do this partially using appcmd:

appcmd.exe list requests | find /c /v ""

I prefer working with powershell but could not find how to accomplish this.

any suggestions?

Kerberos credential delegation is sporadic

$
0
0

I have an application we are trying to configure to use Kerberos delegation to a remote SSRS server. My issue is that delegation does not occur every session (same user) and I can't figure out why. Regardless of whether delegation does or does not occur, I have verified that the user logon to the application server has Impersonation Level: Delegation (from Security log) every time. I also verified that the computer account is set TrustedForDelegation: True on every domain controller to rule out some replication issue. The computer account should have no problem delegating credentials to the SSRS server every time. When I look at the SSRS server security logs, I can see the user account logon when delegation works and the computer account logon when it does not. What can I do to troubleshoot this issue? Thanks

understanding IIS logs

$
0
0

hi all
I want to understand IIS logs but I don't know when I do some operation such as add, delete or edit site or application pools which logs would generate.(eventid 29)
Also what is the "EditOperationType" field in log and when it will be 1, 2 or 3? (see following)

can anyone help me?


2020-02-12T14:19:41.709346+03:30 mail.nsoc.com Microsoft-Windows-IIS-Configuration[3800] {"EventTime":"2020-02-12 14:19:41","Hostname":"mail.nsoc.com","Keywords":4611686018427387904,"EventType":"VERBOSE","SeverityValue":1,"Severity":"DEBUG","EventID":29,"SourceName":"Microsoft-Windows-IIS-Configuration","ProviderGuid":"{DC0B8E51-4863-407A-BC3C-1B479B2978AC}","Version":0,"Task":0,"OpcodeValue":0,"RecordNumber":1350,"ProcessID":3800,"ThreadID":2604,"Channel":"Microsoft-IIS-Configuration/Operational","Domain":"NSOC","AccountName":"Administrator","UserID":"S-1-5-21-1134574511-1599781384-3540602214-500","AccountType":"User","Message":"Changes to '/system.applicationHost/applicationPools/add[@name=\"sss\"]/recycling/periodicRestart/@time' at 'MACHINE/WEBROOT/APPHOST' have successfully been committed.","Opcode":"Info","PhysicalPath":"\\\\?\\C:\\Windows\\system32\\inetsrv\\config\\applicationHost.config","ConfigPath":"MACHINE/WEBROOT/APPHOST","Configuration":"/system.applicationHost/applicationPools/add[@name=\"sss\"]/recycling/periodicRestart/@time","EditOperationType":"1","OldValue":"1.05:00:00","NewValue":"1.02:04:00","EventReceivedTime":"2020-02-12 14:19:44","SourceModuleName":"eventlog","SourceModuleType":"im_msvistalog"}#015

2020-02-09T13:51:39.436880+03:30 mail.nsoc.com Microsoft-Windows-IIS-Configuration[1696] {"EventTime":"2020-02-09 13:51:39","Hostname":"mail.nsoc.com","Keywords":4611686018427387904,"EventType":"VERBOSE","SeverityValue":1,"Severity":"DEBUG","EventID":29,"SourceName":"Microsoft-Windows-IIS-Configuration","ProviderGuid":"{DC0B8E51-4863-407A-BC3C-1B479B2978AC}","Version":0,"Task":0,"OpcodeValue":0,"RecordNumber":4104,"ProcessID":1696,"ThreadID":1772,"Channel":"Microsoft-IIS-Configuration/Operational","Domain":"NT AUTHORITY","AccountName":"SYSTEM","UserID":"S-1-5-18","AccountType":"User","Message":"Changes to '/system.applicationHost/listenerAdapters' at 'MACHINE/WEBROOT/APPHOST' have successfully been committed.","Opcode":"Info","PhysicalPath":"\\\\?\\C:\\inetpub\\temp\\apppools\\APC983A.tmp","ConfigPath":"MACHINE/WEBROOT/APPHOST","Configuration":"/system.applicationHost/listenerAdapters","EditOperationType":"2","EventReceivedTime":"2020-02-09 13:51:41","SourceModuleName":"in_windows_events","SourceModuleType":"im_msvistalog"}#015

2020-02-12T15:13:25.626608+03:30 mail.nsoc.com Microsoft-Windows-IIS-Configuration[2880] {"EventTime":"2020-02-12 15:13:25","Hostname":"mail.nsoc.com","Keywords":4611686018427387904,"EventType":"VERBOSE","SeverityValue":1,"Severity":"DEBUG","EventID":29,"SourceName":"Microsoft-Windows-IIS-Configuration","ProviderGuid":"{DC0B8E51-4863-407A-BC3C-1B479B2978AC}","Version":0,"Task":0,"OpcodeValue":0,"RecordNumber":1396,"ProcessID":2880,"ThreadID":2296,"Channel":"Microsoft-IIS-Configuration/Operational","Domain":"NSOC","AccountName":"Administrator","UserID":"S-1-5-21-1134574511-1599781384-3540602214-500","AccountType":"User","Message":"Changes to '/system.applicationHost/applicationPools/add[@name=\"testSOC1\"]/@autoStart' at 'MACHINE/WEBROOT/APPHOST' have successfully been committed.","Opcode":"Info","PhysicalPath":"\\\\?\\C:\\Windows\\system32\\inetsrv\\config\\applicationHost.config","ConfigPath":"MACHINE/WEBROOT/APPHOST","Configuration":"/system.applicationHost/applicationPools/add[@name=\"testSOC1\"]/@autoStart","EditOperationType":"3","OldValue":"false","NewValue":"true","EventReceivedTime":"2020-02-12 15:13:27","SourceModuleName":"eventlog","SourceModuleType":"im_msvistalog"}#015


Redirect with # in the url

$
0
0

hi all

do you know if there is a possibilty to do a 301 redirect with # in the redirted url (source):

/portin/#/login/SIM-NUMBER/ (like this)

thanks

E

Unable to download anything with microsoft web platform installer

$
0
0

I keep getting this error when I try to install anything from web platform.

"DownloadManager Information: 0 : Starting install sequence
ThreadId=45
DateTime=2020-02-16T11:05:55.6573250Z
DownloadManager Error: 0 : Exception installing 'IIS-WindowsAuthentication'. Exception: System.ComponentModel.Win32Exception (0x80004005): The process creation has been blocked
at System.Diagnostics.Process.StartWithShellExecuteEx(ProcessStartInfo startInfo)
at System.Diagnostics.Process.Start(ProcessStartInfo startInfo)
at Microsoft.Web.PlatformInstaller.ExeInstallCommand.Run(InstallManager installManager, InstallerContext installerContext)
at Microsoft.Web.PlatformInstaller.InstallManager.DoInstall(InstallerContext currentInstall)
ThreadId=45
DateTime=2020-02-16T11:05:55.6673228Z
DownloadManager Information: 0 : Product IIS-WindowsAuthentication done install completed
ThreadId=1
DateTime=2020-02-16T11:05:55.6680746Z
DownloadManager Information: 0 : Increasing current install to 2
ThreadId=1
DateTime=2020-02-16T11:05:55.6680746Z"

Seems to be a permission issue of some sort, can this be fixed ?

Am on Windows 10 home.

Edit: If I use the command line installer then it works fine and I am able to install the same modules.

love my erver

$
0
0

wow thiss server i amazing only took 3 years to get ssset up

https is not working when trying the sites inside the server (not even giving security certificate warning).

$
0
0

We have a server (windows 2008 R2 with IIS 7.5) and have few sites setup in IIS.

When we try accessing the sites using http inside the server, working fine without any issues.

If we try sites using https inside the server, it is giving security certificate error and if we continue its working.

Recently we cloned this server and created second server as it is. Now in side the new server , is we try the site using http its working fine. But if I try using https, its not loading the site, not getting the security certificate error as well, its diplaying"This page can’t be displayed".

May I know what will be the issue, how to fix this? I want the sites to work similar to the first server if I try using https. 

FYI. SSL configured for the sites only in LB not in servers in our setup. 

Display detailed errors for a specific host/subnet?

Enabling Debug in IIS 10 Applications

$
0
0

Hi All,

I'm new to IIS Application Support, Can some one help me how Debug or Trace the IIS 10 Applications in the case of any kind of failure.(Authotication,logging,Permissons and etc)

Thanks in advance.

Can't access website on IIS Server 2019

$
0
0

I am new to IIS .... changing over from Apache.

I have set up everything on a new server running Server 2019.  The website has been added but I can't get it to come up.

Ports are open (80 and 443) and IUSR has been added to the user group.

Checked the binding and the basic settings.  Everything seems to be correct...... but, I can't get it to come up in the browser. 

Also tried bringing it up using "LocalHost" without success.

Hoping someone can point me in the right direction.

Thanks


A/B site setup assitance

$
0
0
Windows Server 2012 R2 IIS 8.5 with URL Rewrite and AAR already installed. We have a current website and it is being completely redesigned. I have been directed to find a way to take incoming traffic (say www.ourdomain.moc) and based upon set parameters direct 50% of traffic to the existing website and 50% to the new website. The premise is that if customer feedback for those directed to the new website is not positive, then the new website will be taken down and revamped and then put back up. Eventually, after about 6 months of positive on the new website, the existing website will be shut down and all traffic will go to the new website. A key requirement/request by my boss is that the host name for the user does not change. I am not a web programmer or IIS guru, I am a network administrator. Any help/ideas are appreciated.

ARR3.0 Http 404 error

$
0
0

Hi Gulus,

I'd face a ARR 3.0 setup problem.

I have install a new Windows Server 2019 STD with IIS feature and ARR 3.0 installed.

And I create a Server Farms name "aplanning" and add 2 server "twbiwebvm04" "twbiwebvm05".

And I'd confirm URL Rewrite rule been added automatically.

If I use IE open  http;//twbiwebvm04/healthcheck.txt , it is worked ! 

But if I open http://aplanning/healthcheck.txt . It popup a http 404 file or directory not found error !

<div id="content"> <div class="content-container">

404 - File or directory not found.

The resource you are looking for might have been removed, had its name changed, or is temporarily unavailable.

</div> </div>

Regards,

Wilson

Unable to download the Web Platform product list.

$
0
0

Unable to download the Web Platform product list. Check your network connection and try again. If the problem persists, report the issue on the Web Platform Installer forum at: http://go.microsoft.com/fwlink/?LinkId=145244.
Details:
One or more errors occurred.

An error occurred while parsing EntityName. Line 106, position 29.

System.AggregateException: One or more errors occurred. ---> System.Xml.XmlException: An error occurred while parsing EntityName. Line 106, position 29.
at Microsoft.WebMatrix.Gallery.Wizard.GalleryWizardModel.Load()
at System.Threading.Tasks.Task.InnerInvoke()
at System.Threading.Tasks.Task.Execute()
--- End of inner exception stack trace ---
---> (Inner Exception #0) System.Xml.XmlException: An error occurred while parsing EntityName. Line 106, position 29.
at Microsoft.WebMatrix.Gallery.Wizard.GalleryWizardModel.Load()
at System.Threading.Tasks.Task.InnerInvoke()
at System.Threading.Tasks.Task.Execute()<---

Windows Authentication and multiple IIS servers

$
0
0

Hi,

We have 2 IIS servers that are connected to the same AD.  Both of these servers have different sites configured to use Windows Authentication.  When a user logs into site1.domain.com, they are able to enter their credentials and gain access to the site.  We'd like the user to be able to click a link to site2.domain.com which is on the other IIS and not have to enter the same credentials again.  Is this possible? 

Thanks,


Andy.

TLS 1.2 issues on ARR

$
0
0

Hi,

I have ARR setup on Server 2016 with 2x Server 2008 web servers in the webfarm. This setup has been working fine for the last year. We are expecting an influx of traffic on our websites for the next 2 months so have decided to add 2 more web servers in the webfarm. Herewith the problem... I added 2x Server 2016 web servers to the webfarm and when the connection is routed to one of these 2 servers I get the following error:


HTTP Error 502.3 - Bad Gateway

The connection with the server was terminated abnormally

Most likely causes:
•The CGI application did not return a valid set of HTTP errors.
•A server acting as a proxy or gateway was unable to process the request due to an error in a parent gateway.

On the ARR server I see the following error in the System log:

Schannel: A fatal error occurred while creating a TLS client credential. The internal error is 10013

I have enabled Schannel debug logging and can see that when ARR connects to one of the server 2008 web servers it negotiates to communicate using TLS 1.0 but when it connects to one of the server 2016 web servers it fails the negotiation.

If I completely disable TLS 1.0 (which we plan to do after this busy period), the connections to both server 2008 and server 2016 web servers fail.

TLS 1.0 is currently enabled on all web servers and the websites work if I connect to them directly from the ARR server bypassing ARR.

I have come to the conclusion that the problem lies with ARR itself not supporting using TLS 1.2.

I have tried the  following solutions on a test environment and still dont have a working solution.

- Confirm all servers are fully up to date and we are using the latest version of ARR 3.0

  • - Set different combinations using IISCrypto tool, including completely enabling all protocols and ciphers.
  • - Set read permission for the "NETWORK SERVICE" on the C:\Program Data\Microsoft\Crypto\RSA\MachineKeys folder
  • - Set the default protocol for WINHTTP using the Internet Settings\WinHttp\DefaultSecureProtocols registry key to use TLS 1.2 for both 32 and 64 bit.
  • - Set the default protocol for DotNet using the .NETFramework\v4.0.30319\SchUseStrongCrypto to use TLS 1.2 for both 32 and 64 bit.
  • - Enabled the FIPS trusted algorithm local security policy.

Any other ideas or info?

Regards

Carl

Viewing all 27852 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>