Auto deploy from W2K machine w/IIS Lockdown applied

From: Norm Dotti (normd@knorrassociates.com)
Date: 12/20/02


From: "Norm Dotti" <normd@knorrassociates.com>
Date: Fri, 20 Dec 2002 07:28:28 -0800


I can't seem to get autodeploy to work from a W2K Server
machine w/the IIS Lockdown applied. I keep getting a 404
when I try to get the exe (e.g. http://webserver/app.exe).
If I turn on directory browsing I can see the exe file
there so I know I'm asking for it correctly. I've got the
app set up for Script-only in IIS. I've got anonymous
access set up. I've removed .config from the list of files
to not download. Does the lockdown tool somehow prevent
the detection of a .net exe? I'm not all that familiar
w/what the lockdown tool does behind the scenes. Any help
would be appreciated.



Relevant Pages

  • Re: New IIS Lockdown tool from Microsoft
    ... New IIS Lockdown tool from Microsoft ... metabase, and the metabase necessarily changes as the sites and features on ...
    (NT-Bugtraq)
  • Re: Problems with IIS Lockdown Tool
    ... I run IIS lockdown on few hundreds box. ... > Lockdown tool does not restore removed services. ... >>warned me that it would uninstall the settings ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS Lock Down Tool
    ... lockdown or urlscan once I have applied it... ... I BOLD THIS FOR THOSE WHO DO NOT KNOW, URLSCAN IS DIVORCED FROM THE ... LOCKDOWN TOOL. ... THEY ARE STILL RECOMMENDED ON ALL IIS SERVERS PRIOR TO IIS ...
    (microsoft.public.inetserver.iis.security)
  • Re: Lockdown tool disables 500-100 asp errors
    ... static string -- which discloses no information and run no ASP -- the most ... I think that lockdown disables that source of information disclosure (on ... Unistalling the lockdown tool fixes the problem, ...
    (microsoft.public.inetserver.iis.security)