Re: IIS Lockdown/URLScan - no .exe's

From: Bernard (qbernard_at_hotmail.com)
Date: 07/29/03 

Date: Tue, 29 Jul 2003 11:14:31 +0800

You can edit the urlscan.ini at
%windir%/system32/inetsrv/urlscan/
to allow .exe extention...

Get more detail about urlscan, here
INFO: Using URLScan on IIS
http://support.microsoft.com/?id=307608
HOW TO: Configure the URLScan Tool
http://support.microsoft.com/?id=326444 

-- 
Regards,
Bernard Cheah
http://support.microsoft.com/
Please respond to newsgroups only ...
"S. Quillen" <scott.quillen@state.de.us-exception> wrote in message
news:03d601c35561$7760d810$a601280a@phx.gbl...
> Update - fixed my .asp problems by re-creating my site
> (that need them) as Front Page Webs.  Still having the
> problem with .exe's tho, if anyone has a helpful idea.
>
> Thanks,
>
> Sq
>
> >-----Original Message-----
> >Here's my problem - I'm running IIS 5 on a W2K server
> >(SP3) to serve an intranet site (inside the DMZ).
> >
> >On Friday (yes, yes, never do anything on Friday) I
> >downloaded teh IIS Lockdown/URLScan tools and set them
> >loose on the server.  Either I didn't read the Docs very
> >well, or didn't configure things correctly, as my server
> >started having probelms immediately thereafter.
> >Specifically, the server would not allow any .asp,
> >or .exe files.  I have found the exception that was
> >preventing those (in URLSCAN.ini), and a as a temporary
> >fix, I have just removed the urlscan.dll from the list
> of
> >ISAPI filters in the master site configuration.
> >
> >This allowed my to serve .asp pages (Some anyway), but I
> >am still unable to use any page which calls an .exe
> (from
> >the cgi-in folder).  Where else is this being
> >restricted?  Execute permissions seem to be set
> correctly
> >in IIS, (scripts and executables), and the permissions
> on
> >the cgi-bin folder on the site in question are correct.
> >
> >When I try to access an .exe, I get this page:
> >---------------
> >An internal error has occured on the server.
> >
> >Please contact an administrator.
> >----------------
> >
> >Any ideas what else is stopping me here?  I also have a
> >few .asp sites that are not working (Error 500)...  I
> >have rolled back the IIS Lockdown settings (and have
> even
> >removed the app), but am still unable to get my .exe's
> to
> >run.
> >
> >Thanks much in advance for any suggestions, etc.
> >
> >Scottq
> >.
> >

Relevant Pages

  • Re: Remote application lunch and terminate (IIS server)
    ... If the program you are trying to launch is not a real CGI application, ... What you want to do is possible, but really has NOTHING to do with IIS. ... then invoke a command on the server. ... depends on how the EXE is written. ...
    (microsoft.public.inetserver.iis)
  • Re: URLscan problem
    ... I did indeed restart the IIS server after ... I took a look at the URLscan log files and found my ... >URLscan seems to be causing a problem with public folder ...
    (microsoft.public.inetserver.iis.security)
  • RE: W3SVC, SMTP, IISAdmin services stopping..hacking?
    ... That SEARCH request is indicative of an attempt to exploit the ... of URLScan blocks SEARCH requests such as this one. ... Internet Services Manager -> right click on your server name -> Properties ... does contain a number of other very important security fixes for IIS. ...
    (microsoft.public.inetserver.iis.security)
  • Re: VS .NET & SDK vs. IIS LockDown & URLScan
    ... The Web Server Has Been Locked Down and Is Blocking the DEBUG Verb ... Stepping into a Web application or XML Web service failed because the IIS ... URLScan is a security tool that works in conjunction with the IIS Lockdown ...
    (microsoft.public.inetserver.iis.security)
  • Re: Web Site Efficiency
    ... How many simultaneous users (approx) can this handle and what happens to the end-user if server freezes from too many users? ... The heart of the system will be the development of a data access COMPONENT (active exe rather than dll to better centrally control user data access. ... Never use DCOM exes to 'centralize' data management from IIS ...
    (microsoft.public.inetserver.asp.components)