Hi

I'm developing a web application to be used by thousands of users.

The development is done under Alpha anywhere that relies on IIS
My question is the following: what are the limitations of IIS in terms of "servicing" users ?
How many users can hit the server at the same time ?

What are the configuration possible if I have 15000 users ?
How do u calculate the need ?
Thx

Hi all, I've got a very old .asp web application that prints to pdf.  I developed this app 13 years ago, and we've now come to record number 10,000 and I need to expand the record number field in the pdf to accommodate for the extra digit.  I've managed to find the file 'requisition.pdf' and I can edit it, I've moved things, expanded the field, but I don't see my modifications reflected in the application, when the pdf is created inside the application.  I move things around but everything stays the same in the app.  What am I missing here?  It's been 13 years and I'm struggling to remember how I did this.  

Some code (reqnum is the field in question):

Dim UserID
UserID = rsReqs("UserID")
strsql2 = "SELECT * FROM [User] Where UserID = '" & UserID & "'"
            set rsUser = Server.CreateObject("ADODB.Recordset")
            rsUser.Open strsql2, connDB, 1, 2
Dim User
User = rsUser("FN") & " " & rsUser("LN")
Set FdfAcX = Server.CreateObject("FdfApp.FdfApp")
Set outputFDF = FdfAcX.FDFCreate      
outputFDF.FDFSetValue "ReqNum", rsReqs("ReqNum"), False
outputFDF.FDFSetValue "UID", User, False       
outputFDF.FDFSetValue "DateEntered", rsReqs("DateEntered"), False       
outputFDF.FDFSetValue "DueDate", rsReqs("DueDate"), False
If rsReqs("Vendor2") = "" Then
outputFDF.FDFSetValue "Vendor", rsReqs("Vendor1"), False
Else
outputFDF.FDFSetValue "Vendor", rsReqs("Vendor2"), False
End If

(a lot more code in here)....

If rsReqs("qty19") > "0" then
outputFDF.FDFSetValue "qty19", …

Hi,

I have a site with anonymous access to the public side and userid/password protection to the admin side.  I've suddenly started getting failures trying to log in to the admin section.  

Environment: Windows server 2008 R2 Standard;  IIS 7.5
For the admin folder, I have Basic authentication and Windows Authentication enabled.

Tried logging in with the local administrator account and that failed.
Detailed error information was:

Module  WindowsAuthenticationModule         Requested URL: http://..../admin
Notificaiton: AuthenticateRequest                     Physical Path   d:\...
Handler: StaticFile                                                 Login Method  Not yet determined
Error code   0xc000006d                                      Logon User       Not yet determined

In the Security event log I'm seeing 4625 failures:

An account failed to log on.

Subject:
  Security ID:     NULL SID
  Account Name:     -
  Account Domain:  -
  Login ID:                0x0
 
Logon Type:            3

Account For Which Logon Failed:
   Security ID:         NULL SID
   Account Name:   administrator
   Account domain: cf

Failure Information:
   Caller Process ID:  0x0
   Caller Process Name:   -

Network Information:
   Worksation Name:  CF
   Source Network Address: 127.0.0.1
   Source Port: 54061

Detailed Authentication Information
  Logon Process:
  Authentication Package: NTLM
  Transited Services:   -
  Package Name (NTLM only): …

HI all,

Im currently workign on a project on tightening security on our webservers. First step on this is disabling weak Ciphers that are still currently enabled. Im aware of the list of known weak ciphers, but im wondering if Im to disable these, what the impact be on the browsers connecting in?

We will disable SSLv3.

TLS 1.1 - Not sure what impact this will have?

Weak SHA  - RC4 MD5

Is anyone aware of a list  browser versions that maybe impacted?

Is it possible for me to map a drive for someone to some files on my server without giving them permission on the server or how would I set this up on the server side to ensure minimal access.

Hi there,

Any kind experts out there can help me to list the following: %systemroot%\system32\inetsrv\ on a default windows IIS 7 or 7.5 in a text file or screenshot will be of great help.

As i do not have access to a IIS 7 or IIS 7.5 at the moment.

Any references to Microsoft website or MSDN will be of great help too.

I am trying to determind if in the default IIS installation the folders are there:

1. inetsrv\IISADMPWD
2. inetsrv\IISHelp
3. inetsrv\Printers
4. inetsrv\IISSamples

i AM TRYING TO SET UP AN OOKLA SERVER FOR MY COMPANY

IM USING SERVER 2012 - WHEN TESTING FROM OOKLA'S SERVER TESTER TOOL .

ONE OF THE SECTIONS IS GIVING ERROR 405 METHOD NOT ALLOWED..

I NEED TO ALLOW POSTS FOR THAT FILE OR LINK TO WORK .. THE FILE IS BY NAME (UPLOAD.ASPX)

I WANT TO KNOW  HOW TO GIVE PERMISSIONS - WITHIN HANDLER MAPPINGS

AND WHAT PERMISSIONS I NEED TO GIVE.

I have 2 servers (Windows Server 2012 R2 and Windows Server 2008) being scanned by Qualys that have surfaced this finding:

HTTP Security Header Not Detected HTTP Security Header Not Detected port 80/tcp

THREAT:
This QID reports the absence of the following HTTP headers:
X-Frame-Options: This HTTP response header improves the protection of web applications against clickjacking attacks. Clickjacking, also known as
a "UI redress attack", allows an attacker to use multiple transparent or opaque layers to trick a targeted user into clicking on a button or link on
another page when they were intending to click on the the top level page.
X-XSS-Protection: This HTTP header enables the browser built-in Cross-Site Scripting (XSS) filter to prevent cross-site scripting attacks. X-XSSProtection:
0; disables this functionality.
X-Content-Type-Options: This HTTP header prevents attacks based on MIME-type mismatch. The only possible value is nosniff. If your server
returns X-Content-Type-Options: nosniff in the response, the browser will refuse to load the styles and scripts in case they have an incorrect MIMEtype.
QID Detection Logic:
This unauthenticated QID looks for the presence of valid X-Frame-Options, X-XSS-Protection HTTP and X-Content-Type-Options headers in a
HTTP request.
IMPACT:
Depending on the vulnerability being exploited, an unauthenticated remote attacker could conduct cross-site scripting, clickjacking or MIME-type
sniffing attacks.
SOLUTION:
N/A
…

When I type in Localhost in the web browser on a Server 2008 RS webserver, i get this message. I was attempting to install PHP  7.0. and was doing some testing of phpinfo.php file and it could not find it.   127.0.0.1  does not bring up a page either.

Hi,
I'm getting ready to migrate to Exchange 2016 from Exchange 2010.
I've asked questions, watched videos and read many guides online for the migration.
All resources are similar in steps that need to be taken.
However, only one resource (A video on Pluralsight.com) mentions "Getting IIS ready for Co-Existence". They say to run the attached command.

My questions.
1. What exactly is this command doing and is there a way for me to do it using IIS GUI? Or is there  way to do it in several shorter commands? I seem to recall running this one long command on a test server months ago and It gave me some powershell errors I couldn't get past.

2. Will the Exchange 2016 setup automatically  take care of what this command is doing?

Thanks!
Nacht

People,

Can anyone here please assist me with the PowerShell script to assist me with restarting the Windows Server 2012 R2:

If the HTTP service is unavailable,
then restart IIS server only.

How to do it in Powershell script so that the script is running every 1 minute ?

Thanks.