Solved

IISlockdwon can't undo

Posted on 2011-09-21
5
217 Views
Last Modified: 2012-08-14
here goes, I have a windows 2000 server used as a web server hosting an intranet and website, I ran IISlockdown as was worried about possible intrusions, now the intranet no longer works. I tried to undo, but it stalls and gives
Starting undo...
Backing up IIS metabase...
Restoring file permissions...
Bad log format: wrong format for log file
Undo did not complete

is there a way to bypass this and re-enable the settings?
0
Comment
Question by:eric_l99
  • 2
  • 2
5 Comments
 
LVL 17

Expert Comment

by:Rovastar
ID: 36583274
What "is no longer works"?

Errors? Blank page? Any thing in any logs?
0
 
LVL 59

Accepted Solution

by:
Kevin Cross earned 500 total points
ID: 36583932
Yes, it has been a while, but IISLockdown is wonderful unless you web applications take advantage of some feature that is considered insecure like parent paths or additional NTFS security. During the lock down rights are updated and IIRC for IIS 5 the URLScan is installed. Not 100% sure as my major last web farm was all IIS 6. If URLScan is installed (check \system32\inetsrv\urlscan\), you can edit the .ini file to re-enable features you need for your web-site to work.
0
 
LVL 59

Assisted Solution

by:Kevin Cross
Kevin Cross earned 500 total points
ID: 36583963
And by "Yes," I was agreeing with Rovastar that clarification on your definition of "no longer works" is needed as you will likely have an easier time fixing the site than removing the lockdown. My memory is murky on the topic, but recall that being a pain with IIS 5 / Windows 2000. I remember using port80 a lot more back then, but I also have IIS 4 to worry about and with the numbers of servers I had to deal with consistency was key. But anyway, if memory serves me correctly, removing the lockdown may not be a friendly process.
0
 

Author Comment

by:eric_l99
ID: 36716828
I am in the process of restoring the permissions to the directories and files manually since the "undo" completely crapped out, the errors I am getting are blank pages, I usually get a login page but I did not get that anymore,

after reapplying rights to specific folders highlighted in the log, I was able to get parts of the site back up, I am currently in the process of sorting out the other parts.
0
 

Author Closing Comment

by:eric_l99
ID: 37461439
access to folders reinstated manually, some parts still not working but they are now obsolete, thanks everyone
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

First of all, clustering IIS is something you should rarely consider doing. In almost all cases, Microsoft Network Load Balancing (NLB) (http://technet.microsoft.com/en-us/library/cc758834(WS.10).aspx) is a much better solution when you need to p…
Debug Tools to analyse IIS process: This article focus on taking memory dumps from IIS to determine which code is taking more time and to analyse which calls hangs/causes more CPU usage. To take dumps,download the following. Install1: To st…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now