Re: IIS Anonymous Security Issue

"Reda Zeid" <RedaZeid@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:2484DC8C-3C42-4481-AA52-93A5DA17D59A@xxxxxxxxxxxxxxxx
Thank you for all your comments here, it helped alot to clarify that it's
not
a Microsoft bug as I hoped it's not, but now practically, what shall I do
to
solve my problem. I can't switch my hosting provider in the current phase,
so
please tell me what to do in step-by-step either in my hosting package
configuration or in my developer's work. I appreciate all your efforts in
that because it's so critical and we can't move on without these steps.

Thank you again for Roger and David, I appreciated guys.

Regards,

Reda Zeid.

But we do not know abput your hosting package configuration,
limitations, capabilities.

Hence all I can say is that you should get a decent hosting contracted
so that you can get on with what you need to do instead of expending
your time trying to cope with what they should have done.

It might be impossible within constraints of their provisioning.
Their passing the buck in those words makes it sound like they
basically do not know what they are doing. If that is so, you
could just expend your efforts on their problem only to then
find they have other severe problems with how they run IIS
and/or Windows.

Roger


"Reda Zeid" wrote:

Hi,

We're using content editor (as a backend) to update our website frontend
contents (WYSIWYG). The problem is that when we try to update the
contents
through this backend, the server is denied and gives us the following
message:

" r.a.d.editor5.6.0 Another process is using the resource (ascx/aspx
file)
you are trying to update or the ASPNET user (IIS5) / NETWORK SERVICE
account
(IIS6) has no write privileges for this file. The changes were not
applied"

When we contacted the hosting company, they replied that we have to give
write privileges to the IIS Anonymous user on our server so we can solve
this
issue, but this will cause another problem, is that this action will
effect
negatively on the server security, and therefore the hackers can hacking
our
website easier. They said that this is a Windows Server bug and no
solution
for it yet. Kindly, reply to me with what we should do and are the above
info
are correct that it can't be solved in right way?

We're using Windows Server 2003 Standard Edition and the page that we're
trying to update through the content editor is an ASPX.

Regards,


.

Relevant Pages

  • Re: Courtyard arrangement - Jeff Middleton
    ... can do with ISA server publishing and how we interpret the idea of ... Microsoft MVPs ... SBS and hosting ... website or if we just had an ISP for the site, ...
    (microsoft.public.windows.server.sbs)
  • Re: Urgent: Problem setting up web site hosting on SBS03 with ISA
    ... On the other side of the coin, perhaps we can also stipulate that many of these issues can be mitigated by a knowledgable administrator who has the skill and experience to properly configure all aspects of the server. ... port 80 as opposed to the other avenues of attack that SBS presents on the external network, inparticular those that also rely on IIS for their core functions. ... Unless new vulnerabilities in IIS are discovered, hosting static HTML pages is probably fairly safe. ... Its database is kept synchronised to a master Access/SQL database on the customer's premises by means of email. ...
    (microsoft.public.windows.server.sbs)
  • Re: Domain Change
    ... If DYNdns.org is handling your External DNS, have them change this to your new IP of the website. ... >> server has a dynamic IP. ... >>> All you need to do is rent space on a ISP hosting service and FTP ...
    (microsoft.public.backoffice.smallbiz)
  • Re: companyweb - Sharepoint services
    ... Public website hosting implies that you would have to open port 80 to the Internet which is vulnerable to hack attacks. ... There are other options, if the budget exist ) to have a separate server in a DMZ zone, and host the public site there. ... Small Business Server 2003 and reinstall the Monitoring component. ...
    (microsoft.public.windows.server.sbs)
  • Re: Can no connects to mySQL database
    ... Have you tried do this at shared virtual hosting, ... Then when you lease space on a database server, ... It may well be that the hosting company insists that you access the ...
    (comp.lang.php)