RE: OWA and Parent Paths

From: Stefan Schachner[MS] (sschaconline@microsoft.com)
Date: 08/07/02 

From: sschaconline@microsoft.com (Stefan Schachner[MS])
Date: Wed, 07 Aug 2002 15:25:28 GMT

I think owa need parent paths enabled ... It clearly stipulates that this
will affect dynamic content and exchange OWA uses dynamic content...
>From Q184717
NOTE: Disabling ASP Parent Paths will only affect the execution of dynamic
content on .asp pages. This does not affect the server's ability to
reference
static content using HTML code (whether it is called from .htm, .html or
.asp
files). The following line in a default.asp would properly display the image
without returning an ASP 0131 error, even after AspEnableParentPaths =
False:

It also indicates that this "may" be a security risk" this depends on what
types of applications you have enabled and if you do not have the latest
security patches..

Stefan B. Schachner MCSE MCP MCP +I
IIS Newsgroup Support

Please do not send email directly to this alias. This is our online account
name for newsgroup participation only.

If you would like to open a support incident with Microsoft, call
1-800-936-5800

This posting is provided “AS IS” with no warranties, and confers no rights.
You assume all risk for your use. © 2001 Microsoft Corporation. All rights
reserved.

============================================================================
============
For More Information Check out these sites!
IIS Support Information: http://support.microsoft.com/support/iis
IIS Security Checklist:
http://www.microsoft.com/technet/security/iischk.asp
Knowledge Base: http://support.microsoft.com
Online Web Workshops: http://msdn.microsoft.com/workshop
Seminars Online: http://www.microsoft.com/seminar

Relevant Pages

  • Re: FrontPage Wizard Error
    ... I am a newbie in a process of learning ASP coding. ... I would recommend one wizard which has ... >> Utilized FrontPage 2003 Database Wizard to create an online feedback ...
    (microsoft.public.inetserver.asp.db)
  • Re: IIS Setting "Enable Parent Path" and security implications
    ... looking from the client connecting to the server or the existing code on the ... can a hacker introduce ASP code with parent paths into my website ... Enable parent paths is set to no. ...
    (microsoft.public.inetserver.iis.security)
  • Re: How to use VB in other prog?
    ... Does MS Studio.net allow me to create the DLL? ... online, though I'd really suggest that you consider VB6 (or just do the ... whole job in ASP .NET, ...
    (microsoft.public.vb.general.discussion)
  • Re: Application can not work properly
    ... Active Server Pages, ASP 0131 Disallowed Parent Path" ... The reason _why_ you shouldn't enable parent paths is not written in that KB ... to a folder on the web server that has execute permissions, ...
    (microsoft.public.inetserver.iis)
  • Enable Parent Paths (IIS)
    ... I have checked the box for enable parent paths in a web sites ... I've verified thet *.asp is configured for GET, ... Active Server Pages error 'ASP 0131' ...
    (microsoft.public.windows.server.sbs)