IIS Server Security - 2 Questions - IIS6 Novice

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > November 2004 > 2 Questions - IIS6 Novice





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author 2 Questions - IIS6 Novice
Gary

2004-11-16, 7:47 am

1. Users can view a Word .doc file by clicking a link. Occasionally the
following is displayed in the IIS Log when users try to access the file:

GET /_vti_inf.html - - xxx.xxx.xx.xx HTTP/1.1
Mozilla/2.0+(compatible;+MS+FrontPage+4.0)
POST /_vti_bin/shtml.exe/_vti_rpc - - xxx.xxx.xx.xx HTTP/1.1 MSFrontPage/4.0

What exactly is going on here? (I do not have WebDAV enabled)

2. What is causing/the explanation for the following security log entry:

Event ID 536
Logon Failure: The NetLogon component is not active.
Logon Type: 3
Logon Process: Schannel

I do require a certificate to access one directory.

Thanks for the help.
Ken Schaefer

2004-11-16, 7:47 am

a) Looks like someone is using Frontpage, or some other FP-client (eg Visual
Interdev) to get some information about the file. Is the IP address of the
client one of your IP addresses? Or a remote address?

b) Is the NetLogon service running?

Cheers
Ken

"Gary" <Gary@discussions.microsoft.com> wrote in message
news:05304AD6-8933-4230-A815-E79345C01CE0@microsoft.com...
> 1. Users can view a Word .doc file by clicking a link. Occasionally the
> following is displayed in the IIS Log when users try to access the file:
>
> GET /_vti_inf.html - - xxx.xxx.xx.xx HTTP/1.1
> Mozilla/2.0+(compatible;+MS+FrontPage+4.0)
> POST /_vti_bin/shtml.exe/_vti_rpc - - xxx.xxx.xx.xx HTTP/1.1
> MSFrontPage/4.0
>
> What exactly is going on here? (I do not have WebDAV enabled)
>
> 2. What is causing/the explanation for the following security log entry:
>
> Event ID 536
> Logon Failure: The NetLogon component is not active.
> Logon Type: 3
> Logon Process: Schannel
>
> I do require a certificate to access one directory.
>
> Thanks for the help.



Gary

2004-11-16, 7:47 am

Hi Ken - thanks for the quick response.

a. The IP Address is from a remote address (the IP is from a trusted source).

b. The NetLogin Service is set to "Manual" and to Run As "Local Account".
When I try to "Start" it, a dialog is displayed stating the service has
nothing to do.

"Ken Schaefer" wrote:

> a) Looks like someone is using Frontpage, or some other FP-client (eg Visual
> Interdev) to get some information about the file. Is the IP address of the
> client one of your IP addresses? Or a remote address?
>
> b) Is the NetLogon service running?
>
> Cheers
> Ken
>
> "Gary" <Gary@discussions.microsoft.com> wrote in message
> news:05304AD6-8933-4230-A815-E79345C01CE0@microsoft.com...
>
>
>

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com