RE: IIS Lockdown Blues

From: Lisa Cozzens [MSFT] (lcozzens@online.microsoft.com)
Date: 01/03/03 

From: lcozzens@online.microsoft.com (Lisa Cozzens [MSFT])
Date: Fri, 03 Jan 2003 19:52:44 GMT

Sorry Shawn, I forgot one very important step. After removing URLScan from
the ISAPI Filters list, make sure you restart IIS.

Thanks!
Lisa

--------------------
> Newsgroups: microsoft.public.inetserver.iis.security
> From: lcozzens@online.microsoft.com (Lisa Cozzens [MSFT])
> Organization: Microsoft
> Date: Fri, 03 Jan 2003 19:51:46 GMT
> Subject: RE: IIS Lockdown Blues
> X-Tomcat-NG: microsoft.public.inetserver.iis.security
> MIME-Version: 1.0
> Content-Type: text/plain
> Content-Transfer-Encoding: 7bit
>
> Hi Shawn,
>
> If you're having that many problems just running iislockd and the URLScan
> uninstall, I'd be a bit concerned that there might be some deeper
problems
> with the box, unrelated to IIS or the Lockdown Tool.
>
> That said, you can manually uninstall the Lockdown Tool to see if that
> helps at all. It's not pretty, but here's the procedure:
> 1. First, just try getting rid of URLScan. Open the Internet Services
> Manager -> Right click on your server name -> Properties -> Edit button
> next to WWW Service -> ISAPI Filters. Click on URLScan if it's in the
list
> and click the Remove button. Test to see if that fixes the problem.
>
> 2. If that doesn't work, restore your metabase to the pre-locked-down
> version. Open Internet Services Manager -> Right click on your server
name
> -> Backup/Restore Configuration -> Select the metabase backup with the
date
> and time when you originally ran the Lockdown Tool (it will probably be
> called oblt-mb) -> Click the Restore button.
>
> 3. If you're still having problems, go to Start -> Administrative Tools
->
> Computer Management -> System Tools -> Local Users and Groups -> Groups.
> Remove all accounts out of the Web Applications and Web Anonymous Users
> groups.
>
> Hope this helps,
> Lisa
>
> --------------------
> > Content-Class: urn:content-classes:message
> > From: "Shawn G" <shawnblue22@NOSPAMaol.com>
> > Sender: "Shawn G" <shawnblue22@NOSPAMaol.com>
> > Subject: IIS Lockdown Blues

> > Date: Fri, 3 Jan 2003 02:54:55 -0800
> > Lines: 42
> > Message-ID: <062601c2b316$8d0c4840$d5f82ecf@TK2MSFTNGXA12>
> > MIME-Version: 1.0
> > Content-Type: text/plain;
> > charset="iso-8859-1"
> > Content-Transfer-Encoding: 7bit
> > X-Newsreader: Microsoft CDO for Windows 2000
> > X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
> > Thread-Index: AcKzFo0JqdU4MkxbQi+M+/VyjZl5Ew==
> > Newsgroups: microsoft.public.inetserver.iis.security
> > Path: cpmsftngxa09
> > Xref: cpmsftngxa09 microsoft.public.inetserver.iis.security:14095
> > NNTP-Posting-Host: TK2MSFTNGXA12 10.40.1.164
> > X-Tomcat-NG: microsoft.public.inetserver.iis.security
> >
> > Hi,
> >
> > Regarding a post from 31-12-02, I have not been able to
> > resolve the situation. I am sure that these symptoms will
> > provide someone with a clue as to what the problem might
> > be;
> >
> > Installed IISLockd tool on SBS4.5. Applied SBS4.5
> > template. Something has happened as there is no access to
> > web services, Proxy administration, IIS Manager and SBS
> > Console.
> >
> > A point to note is that when the wizard was running the
> > option to install URLScan was greyed out, although it was
> > ticked.
> >
> > I cannot find an uninstall for IIS lockdown, cannot run
> > iislockd.exe( I have tried to undo the changes by running
> > the tool again, although I am not able to run the
> > installation. A window shows the exe unpacking and thats
> > as far as I get). iislockd process is seen however using
> > task manager.
> >
> > IIS URLScan Tool 2.0 (remove only) is shown in add/remove
> > programs, although when I try this the add/remove programs
> > window freezes until reboot.
> >
> > I have searched for the URLScan log file, this does not
> > exist.
> >
> > I have tried extracting URLScan from iislockd.exe and re-
> > installing the corrupted URLScan installation. The program
> > runs (shown in task manager) although no installation
> > screen appears.
> >
> > Anyone with a clue, please let me know.
> >
> > Thanks in advance,
> >
> > Shawn Green
> >
> >
> >
>
> -----
> Please do not send email directly to this alias. This is an online
> account name for newsgroup participation only.
>
> This posting is provided "AS IS" with no warranties, and confers
> no rights. You assume all risk for your use.
>
> © 2002 Microsoft Corporation. All rights reserved.
>

-----
Please do not send email directly to this alias. This is an online
account name for newsgroup participation only.

This posting is provided "AS IS" with no warranties, and confers
no rights. You assume all risk for your use.

© 2002 Microsoft Corporation. All rights reserved.

Relevant Pages

  • Re: Trend C/S/M SMB on SBS2003
    ... IIS6 is locked down by default, so you do not need to run IIS Lockdown ... URLScan can run on IIS6 if you wish. ...
    (microsoft.public.inetserver.iis)
  • Re: Trend C/S/M SMB on SBS2003
    ... IIS6 is locked down by default, so you do not need to run IIS Lockdown ... URLScan can run on IIS6 if you wish. ...
    (microsoft.public.windows.server.sbs)
  • RE: OWA not displaying properly after upgrade- E2K to E2K3
    ... It was a permissions issue. ... I had used IIS Lockdown (urlscan is part of IIS ...
    (microsoft.public.exchange.setup)
  • Re: ASP.NET 2.0 maximum URL length?
    ... explicitly installed on my IIS7/Vista system? ... URLScan - an add-on tool I have not installed. ... It's a recommended install for IIS 4.0 and 5.0, ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Restrict by UserAgent
    ... Performance concerns for the Apache solution is real because in that case, ... I would not automatically assume that the same caveat affects IIS ... > Well, after going through the available documentation on URLScan 2.5, it ... Apache cannot do this without using a custom module which happens to ...
    (microsoft.public.inetserver.iis.security)