Guestbook in Frontpage

From: wosully (wosully_at_discussions.microsoft.com)
Date: 05/08/05 

Date: Sat, 7 May 2005 21:00:01 -0700

I believe the permissions in my guestbook page my be too restrictive. I am
running 2003 SP1 and have applied the security configuration Wizzard. IIS is
on a domain controller, and MS loves it there.

I have created a test website with the guestbook from frontpage, but it will
not allow any writing, and states:

FrontPage Error.
User: please report details to this site's webmaster.
Webmaster: please see the server's application event log for more details.

This is frustrating and has taken me some time with no success. Here are
the IIS logs:

2005-05-08 03:50:17 192.168.1.10 GET /connor/name.htm - 80 - 192.168.1.10
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
304 0 0

2005-05-08 03:50:20 192.168.1.10 GET /connor/name.htm - 80 - 192.168.1.10
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
304 0 0

2005-05-08 03:50:20 192.168.1.10 GET /connor/name.htm - 80 - 192.168.1.10
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
304 0 0

2005-05-08 03:50:21 192.168.1.10 GET /connor/name.htm - 80 - 192.168.1.10
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
304 0 0

2005-05-08 03:50:26 192.168.1.10 POST /_vti_bin/shtml.dll/Connor/name.htm -
80 - 192.168.1.10
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
200 0 0

2005-05-08 03:52:46 192.168.1.10 POST /_vti_bin/shtml.dll/Connor/name.htm -
80 - 192.168.1.10
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
200 0 0

2005-05-08 03:53:09 192.168.1.10 GET /connor/name.htm - 80 - 192.168.1.9
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
304 0 0

2005-05-08 03:53:13 192.168.1.10 POST /_vti_bin/shtml.dll/Connor/name.htm -
80 - 192.168.1.9
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322)
200 0 0
 
Thank you,
MCSE: Security, CCNA, A+, Network +, Security+

Relevant Pages

  • Re: Is this normal behavior or an attack?
    ... Unless the event log entry is written by IIS, ... identify actions by site/app. ... process identity and denying the security breach. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Why will this code run on server 2000 but not on server2003
    ... Have you checked the event log (the security even log; ... You may also want to post this to an IIS newsgroup to see if you get faster ... There were a LOT of security changes between IIS5 and IIS6. ... >>> Public Function GetUsers() ...
    (microsoft.public.windows.server.active_directory)
  • RE: Auditing login attempts
    ... It does make sense that IIS will report failed logins via ... I'll continue to monitor both the System and Security ... >IIS works on a different level as security subsystem. ... >system event log. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Guestbook in Frontpage
    ... Check your guestbook file permissions to make sure IUSR_has write permissions. ... > running 2003 SP1 and have applied the security configuration Wizzard. ... please see the server's application event log for more details. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Mac Server Hacked In Less Than 6 Hours
    ... Windows has RAS, and for it is built in since NT 3.1 ... | A typical IIS box and this Mac are not the same thing so the comparison ... IIS has been subject to quite a few bugs and so have ... Security isn't a proprietary attribute. ...
    (sci.crypt)