Re: IIS Lockdown Cant Stop Web Services

From: BB (Bernard_at_3exp.com)
Date: 04/17/03 

From: "BB" <Bernard_at_3exp.com>
Date: Thu, 17 Apr 2003 10:56:03 +0800

Wow. you have many issues, let's try one by one.
1) Try login physically at the server. not TS.
2) check if urlscan installed, if not I don't think
you will get 'rejected by ...' in iis log file.
and if you do, but without urlscan.ini (weird),
remove everything and install again.
3) then edit urlscan.ini to cater .exe
4) regarding your a/c issue, reset password, check
it's group membership again. 

-- 
Regards,
Bernard Cheah
http://support.microsoft.com/
"Dooza" <steve@spammedooza.tv> wrote in message
news:OODoNlABDHA.3252@TK2MSFTNGP11.phx.gbl...
> "BB" <Bernard_at_3exp.com> wrote in message
> news:eT54oY8ADHA.2984@TK2MSFTNGP11.phx.gbl...
> > Edit the urlscan.ini located at
> > %systemroot%/system32/inetsrv/urlscan/
> >
> > remark the .exe in [DenyExtensions] session.
> > save the ini, restart IIS and try again.
>
> i had to reinstall lockdown to get this going again, and it again gave an
> abnormal termination as it was finishing off. i tried to edit the ini file
> but it told me the file didnt exist, and then all links or files didnt
work.
> so i rebooted the server, tried to login with my main admin account, and
it
> almost got there before saving settings and TS closing. i logged in with
my
> second admin account and i got in, started the small apps and services
that
> needed starting, and edited the ini file and it seems to be working.
>
> only problem now is that the baseline advisor still thinks i dont have
> urlscan, even tho i do as i double checked without the .exe remark.
>
> the baseline advisor thinks i have 11 hotfixes missing, but i dont. i
redid
> them all again, and it still thinks they are not there. what should i do
> here? and why wont my main account login anymore?
>
> Dooza
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.471 / Virus Database: 269 - Release Date: 10/04/2003
>
>

Relevant Pages

  • explorer.exe not responding for admin account
    ... I have a Windows 2000 server (fully patched, ... to the box using the admin account and click on the start menu. ... account and login under a different account and the box works normally. ... There are no errors in the error log. ...
    (microsoft.public.windows.server.general)
  • Re: running sp_password for MSDE upgrade
    ... Sounds like the server is configured to require login using NT ... Try using a trusted connection ... under your admin account by issuing ...
    (microsoft.public.sqlserver.security)
  • Re: Oodles of 529 Logon Failures every 2:00 AM
    ... Microsoft MVP (Windows Server System: ... > can't lock out the Administrator account. ... > administrator accounts on the servers get a failed login to their local ... wherever the local admin account of the server has been ...
    (microsoft.public.security)
  • Re: Oodles of 529 Logon Failures every 2:00 AM
    ... Microsoft MVP (Windows Server System: ... > can't lock out the Administrator account. ... > administrator accounts on the servers get a failed login to their local ... wherever the local admin account of the server has been ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Oodles of 529 Logon Failures every 2:00 AM
    ... Microsoft MVP (Windows Server System: ... > can't lock out the Administrator account. ... > administrator accounts on the servers get a failed login to their local ... wherever the local admin account of the server has been ...
    (microsoft.public.win2000.security)