1. Intranet security fails on Digest security works fine on normal IIS security (Integrated)
As the title states I have two SharePoint sites. One is using regular Integrated Authentication and works great. I added the url to the 'Intranet' section of IE security (IE7). But on the other site I have turned on Digest and turned off Integrated for public users. With that site every time I visit it requires a logon. I would expect IE to pass the local logon to IIS and digest would process it. But it doesn't and I have to log in. Any ideas? Thanks Chris Auer
2. Reminder: Security in IIS 6.0 Webcast by Security PM
3. Microsoft Security Bulletin MS04-021 - Security Update for IIS 4.0 (841373)
4. Asp.Net Security Analyser (new security tool by DDPlus) - IIS Server Security
5. security template for Bastion Host (from W2K3 Security Guide)
When I look at this (Bastion Host.inf) template in notepad it lists 89 registry entries. But when I look at it using the Security Templates MMC snap-in, there is nothing listed under the Registry folder! I'm confused! Also, is there somewhere to find documentation on what settings each of these templates applies?
7. WMI to alter IIS virtual directory security settings?
I'm hoping to find some way (script WMI or whatever) to change website security. Specifically, I need to enable Windows authentication and disable anonymous authentication, just as if I was doing it from the IIS Admin Directory Security tab. I would only be able to provide the virtual directory name/path. Any suggestions? -mdb