Click here to get back home

IIS lockdown
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
IIS lockdown Karson 12-10-2005
---> Re: IIS lockdown Roger Abell [MV...12-10-2005
Posted by Karson on December 10, 2005, 9:16 am
Please log in for more thread options
 Not too sure if I have posted to the right group?


Can someone please help me? I ran IIS lockdown on my Windows 2000 SBS
server last night and for some reason IIS will not allow me to download a
file that has an exe extension.

For example:

If I type www.whateverthesitenameis.com\transfer\test.exe I get a page not
found error. If I access the directory on my windows 2000 server and change
the file name to test.zip or any other extension it works like a charm. Has
lockdown installed some kind of filter that blocks .exe downloads?


Any help would be apprecited..

Thanks,
Karson



Posted by Roger Abell [MVP] on December 10, 2005, 11:17 am
Please log in for more thread options
 The .exe extension is probably stated as disallowed in the
urlscan.ini file. Locate the file, by default in your server's
system32\inetsrv\urlscan directory and edit it with notepad.
When done, at cmd prompt issue command iisreset

> Not too sure if I have posted to the right group?
>
>
> Can someone please help me? I ran IIS lockdown on my Windows 2000 SBS
> server last night and for some reason IIS will not allow me to download a
> file that has an exe extension.
>
> For example:
>
> If I type www.whateverthesitenameis.com\transfer\test.exe I get a page not
> found error. If I access the directory on my windows 2000 server and
> change the file name to test.zip or any other extension it works like a
> charm. Has lockdown installed some kind of filter that blocks .exe
> downloads?
>
>
> Any help would be apprecited..
>
> Thanks,
> Karson
>



Posted by Karson on December 10, 2005, 12:35 pm
Please log in for more thread options
Roger.....


Thank you one hundred times over....!


Worked like a charm..



> The .exe extension is probably stated as disallowed in the
> urlscan.ini file. Locate the file, by default in your server's
> system32\inetsrv\urlscan directory and edit it with notepad.
> When done, at cmd prompt issue command iisreset
>
>> Not too sure if I have posted to the right group?
>>
>>
>> Can someone please help me? I ran IIS lockdown on my Windows 2000 SBS
>> server last night and for some reason IIS will not allow me to download a
>> file that has an exe extension.
>>
>> For example:
>>
>> If I type www.whateverthesitenameis.com\transfer\test.exe I get a page
>> not found error. If I access the directory on my windows 2000 server and
>> change the file name to test.zip or any other extension it works like a
>> charm. Has lockdown installed some kind of filter that blocks .exe
>> downloads?
>>
>>
>> Any help would be apprecited..
>>
>> Thanks,
>> Karson
>>
>
>



Similar ThreadsPosted
NTFS Lockdown December 5, 2005, 1:37 pm
Lockdown/Hardening Tool March 21, 2006, 3:53 pm
Lockdown on 2nd NIC card on WIN2003 Server March 6, 2006, 3:01 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap