Questions tagged [iis-10]
IIS 10 is the version of Microsoft's Internet Information Services that ships with Windows Server 2016, and some Windows 10 versions
171
questions
28
votes
4
answers
93k
views
Remove/Modify IIS 10 Server Header which discloses IIS version
I'm trying to remove the "Server" header that discloses my IIS version. I'm using IIS Express 10 with ASP.NET Core 3.0 and have developed a Web API. I've tried the options below, but the ...
- 381
16
votes
3
answers
19k
views
What role does "App Pool Identity" play for an Application Pool?
When talking about IIS 7.5 security, AFAIK:
App Pool Identity decides whom my web application runs as.
Authentication Method decides whom the clients are authenticated as.
I have a virtual folder ...
- 656
7
votes
1
answer
22k
views
IIS 10 - Deny all IP restriction
I come from the Windows 2003 Server world and it's IIS version is much different then IIS 10 on Windows 2016 Server. The 2003 server appears to have denied all IP addresses by default. How to I deny ...
- 183
6
votes
2
answers
895
views
IIS reports "404 Not Found" error for folders created in WSL Bash
After the most recent update Win10 update (1803) IIS started reporting error "404 Not Found" for folders created in WSL Bash (Windows Subsystem for Linux).
Folder security settings (in Windows ...
- 231
5
votes
2
answers
3k
views
IIS Application Initialization isn't running even though all settings are configured
The end goal is to make it so that whenever my app pool is recycled (which should happen whenever I release an update for the site), my site gets visited once to "warm up". Typically the first visit ...
- 51
4
votes
1
answer
4k
views
Removing IIS10 Self-signed Certificate "WMSCV-SHA2-webserver"
On my IIS server, there are two certificates. One is issued by a real CA based on my request and is used as the SSL cert on the server's website. The other is a self-signed certificate with the name ...
- 341
4
votes
1
answer
8k
views
What is the meaning of an IIS http status code 404.503?
Microsoft lists the IIS http status codes including the substatus codes here.
In the 404 section there are substatus codes between 0 and 20, but in my logs I get a 503 as sc-substatus
I can't find ...
- 14.1k
4
votes
2
answers
11k
views
What steps to take when trying to resolve unresponsive/hung/broken IIS web site?
What steps do you take when you find an IIS web site is not responding?
I might try to first telnet to the specified port, then check web site binding and authentication, and at last restart it.
I ...
- 167
3
votes
0
answers
630
views
Broken Shared Configuration
Infrastructure
We have 4 webservers (WEB1-4). We have Shared Configuration turned on on all those webservers to a shared network path (\\fs100\Config\Web - Config).
Problem
From time to time, a random ...
- 131
3
votes
0
answers
565
views
IIS on Windows 2019 stops logging web requests in September
scary problem with IIS on Windows 2019 Standard, IIS is not writing W3C log files! I did see this similar item, but did not need to make new directories
Three Windows Standard 2019 servers running ...
3
votes
0
answers
733
views
Microsoft IIS HTTP/2 Vulnerabilities Registry Keys Recommended Values
Microsoft "fixed" the HTTP/2 vulnerabilities recently discovered. The updates add the ability to create the registry keys to stop the vulnerabilities, they don't actually fix the vulnerabilities ...
- 159
2
votes
1
answer
18k
views
IIS - Request filtering is configured on the Web server to deny the request because the content length exceeds the configured value
(For starters, I have found a lot of info here on SO, and have followed a lot of the information to no avail.)
I am getting the following error when I upload multiple files to the server.
HTTP ...
- 111
2
votes
1
answer
5k
views
Integrated Windows Authentication, Azure Active Directory and an AAD Joined Azure VM
I'm hoping someone maybe able to help by either helping identify what I'm missing, or confirming if indeed it's possible.
Background
We have a new Azure VM with Windows 2019 Datacenter on and IIS ...
- 23
2
votes
1
answer
603
views
Limit a single users FTP access on IIS10 to a IP address
Can I limit a user so they can only access my FTP server from a set IP address whist allowing other users to access the FTP from anywhere?
I have a Windows Server 2019 server running IIS 10 with an ...
- 123
2
votes
1
answer
3k
views
"Access is denied" error when starting the Web Management Service
I am trying to set up Web Deploy on an IIS 10 server running on Windows Server 2019. The Web Management Service must be running in order for this to occur, but it will not start.
I installed the ...
2
votes
1
answer
2k
views
Export Multiple or all SSL certificates IIS
Is there a way to use appcmd, MMC or perhaps some other tool to export all IIS SSL certificates and then import them in on another server? I've used appcmd to export the bindings and the application ...
- 23
2
votes
1
answer
9k
views
Why is IIS NOT reading/using the site's Web.config, while IIS Manager is correctly accessing the Web.config?
After "more time than was prudent" debugging an issue with handlers not being applied correctly, I've determined that the SiteRoot/web.config shown in IIS Manager is not actually used by IIS....
- 131
2
votes
2
answers
6k
views
IIS 10 how do I remove internal IP address from response headers
IIS 10 on Windows Server 2016. All current patches are installed. A recent PCI scan claims that the internal IP address of the server is being leaked in HTTP headers. Unfortunately, this scanning ...
- 338
2
votes
1
answer
4k
views
Generate end-entity certificate with OpenSSL for localhost on IIS
I would like to ask how to generate end entity certificate based on my own CA root certificate?
I've generated root CA this way:
openssl req -x509 -newkey rsa:4096 -sha256 -days 3650 -nodes \
-...
- 31
2
votes
1
answer
442
views
Central Certificate Store Failures and Logging
I've got IIS 10 on a Server 2019 instance with a Centralized Certificate Store configured.
The CCS looks valid in IIS. Certs are loaded and display no warnings or errors, but requests to any site ...
- 133
2
votes
1
answer
6k
views
IIS 10 URL Rewrite giving 404 error
I am currently stuck with my rewrite rules, and I would need some hints about it.
Here's the situation :
We have two websites, one is website.com, the other one is website-staging.com (just examples ...
- 562
2
votes
0
answers
405
views
IIS stopped serving static content over a certain (small) size
I'm really hoping somebody can help apply some sanity to this IIS issue that has been driving me crazy. I seem to be experiencing the same problem as the poor soul in this thread: https://forums.iis....
- 121
2
votes
0
answers
422
views
IIS 10 - domain with ß results in 400 "Bad Request - Invalid Hostname"
We try to use hostheader with the german umlaut ß (sharp s, "Eszett") like www.straße123.de in IIS 10 websites.
The hostheader is accepted in IIS, the DNS entry or HOSTS entry on client with punycode ...
- 125
2
votes
0
answers
1k
views
Initializing windows server 2019 for hosting multiple website multiple domain names and single IP
I want to set up a virtual machine to host windows server 2019 to host multiple websites in IIS 10. Each website can be reached with a domain name for example:
www.website1.com
www.website2.com
...
- 131
2
votes
0
answers
119
views
How to properly configure IIS to have requests go to a web service 2 folders down
I'm moving an old .Net 2 web service from a Windows 2008 R2 server to a new Windows 2016 Datacenter server. It has something else set up on the Default Web Site, but I have created an additional one ...
- 160
1
vote
1
answer
153
views
IIS: Multi level subdomain with wildcard not resolving
Let's say I have a website - example.com. If I create a binding in IIS, with *.example.com then abc.example.com works.
However, abc.in.example.com doesn't work. It gives me 404 status code.
Any ...
- 141
1
vote
1
answer
561
views
How to use AD CS to auto-renew certs for securing IIS websites that use SNI?
I have AD CS which automatically provisions and renews machine certificates for servers bound to the directory. (There is a certificate template which controls this auto-issuance.)
I have an IIS ...
- 484
1
vote
1
answer
637
views
How can I use the IP Address and Domain Restrictions module for only one website on an IIS 10 server with multiple websites?
does anyone know if there is a way to use the IP Address and Domain Restrictions module on only one website in IIS 10?
My IIS server has 12 different websites, but I only need to restrict one to ...
- 193
1
vote
1
answer
163
views
IIS 10 website with hostname served by Default Web Site
I have configured some websites in IIS on my Windows VPS.
When I am accessing this subdomain installer.app-wards.com from the server, it's going to the wwwroot folder from Default Web site instead of ...
- 113
1
vote
1
answer
507
views
Force https on all website except one on IIS
I followed this example "Best way to redirect all HTTP to HTTPS in IIS" for redirecting to https and it worked great.
I just have one website that is the exception. It has a few non-https ...
- 226
1
vote
2
answers
447
views
IIS -- procedure to ensure new version of deployed web app is the one actually used
I am using IIS, Version 10 on Windows Server 2016.
When I deploy a new Web app it goes under "Sites" with an organization of:
ServerNameA and then several sites, including MySiteA, which ...
- 229
1
vote
2
answers
6k
views
How to uninstall IIS 10 on Windows Server 2016?
I cannot disable/remove IIS component also its child components.
How to uninstall IIS 10 on Windows Server 2016?
- 151
1
vote
1
answer
391
views
Subdomains starting with wildcard
I want to achieve this behavior on IIS 10 and GoDaddy DNS servers.
I have three servers handling three applications, first two are working fine, but having trouble with the third one:
All www....
- 113
1
vote
1
answer
186
views
Having difficulty connecting to PostgreSQL with Django hosted on IIS
Trying to host Django 4 app with PostgreSQL database on Windows Server 2016 with IIS manager 10 and httpPlatformHandler 1.2.
The app and database work without issues when running on a VM server with ...
1
vote
1
answer
273
views
Occasional 403 error on IIS
Using IIS 10 on Windows Server 2019. I am not a server admin, I am a developer who manages sites on the rented server.
I have a report that runs through names, and via a client side scripts, access an ...
- 131
1
vote
1
answer
280
views
Exporting certificates on Microsoft IIS 2019 ver 10
I have Imported an SSL certificate in Windows 2019 Server, IIS ver 10.
When I right click on the certificate from IIS, the "Export" option is missing.
Is there any way to bring this option ...
- 11
1
vote
1
answer
4k
views
My IIS URL Rewrite rule is not working for my IIS website
I have an IIS Server on Windows Server 2016 where I host one website.
The site is using bindings so that both of these domains, astro.resources.teams.org and astronomyteams.org, goto to the same ...
- 193
1
vote
2
answers
10k
views
ERR_CONNECTION_RESET When Using HTTPS Hosted by IIS 10 and Windows Server 2019
I have a site hosted in IIS 10 on a server running Windows Server 2019. I've set up an HTTPS certificate with Let's Encrypt. Attempts to view the site with http:// work normally, but when I enter ...
- 163
1
vote
1
answer
1k
views
ASP.net IIS requests not timing out after executionTimeout Value
We have set system.web/httpRuntime executionTimeout = 60s for our .net 4.8 application hosted on server 2019 IIS 10. From time to time we see varied requests exceeding this timeout by a large margin, ...
- 111
1
vote
2
answers
6k
views
How to restart the IIS application pool remotely via command line and MSDeploy
I am creating GitHub actions to automatically deploy my website.
I have everything working other than the ability to remotely restart the application pool.
From what I've read, I need to stop the ...
- 160
1
vote
2
answers
3k
views
Using FTP on IIS in passive mode both for internal and external network
We have an server in our DMZ running Windows Server 2016, with IIS are are having some issues using FTP in Passive mode from our internal network. We want to be able to use this both from our inside ...
1
vote
1
answer
1k
views
using appcmd to set physical path of a website
How can I use appcmd in IIS7 to set the physical path of a website?
Something like...
appcmd set site summit /[path='/'].path:c:\newpath
- 303
1
vote
1
answer
813
views
Force download of PY files in Edge and IE
Clicking on a link to a PY file in Google Chrome downloads it as desired but doing so in Microsoft Edge and Internet Explorer simply views it.
Is this an issue with the web browsers or the web server?...
- 905
1
vote
1
answer
1k
views
IIS Windows 2016 ecdsa signed certificate
Does anyone know if IIS supports certificates signed with sha256ecdsa?
If viewed with openssl, i have the following parameters:
Signature Algorithm: ecdsa-with-SHA256
Public Key Info: NIST CURVE: P-...
- 475
1
vote
1
answer
2k
views
IIS sc-win32-status 64 when using url rewrite over https and ColdFusion
I've run into a very specific and annoying problem. It involves all of the following:
Windows Server 2016 (IIS 10)
Url Rewrite Module
ColdFusion 2016
https
When a rewrite rule is triggered to point ...
- 121
1
vote
0
answers
140
views
IIS keeps using the old certificate after new one has been selected
I have had an LetsEncrypt certificate generated through Win-Acme on an IIS website. After some time, it was requested to be changed for a different certificate, generated by RapidSSL. I have received ...
- 11
1
vote
1
answer
245
views
IIS multiple sites with separate SSL certificate for each - they all use the same one
Using IIS 10, I have 3 websites with 3 different hostnames, but the same IP address and port, and each of them has their own SSL certificate.
In the bindings I can see that each has the correct ...
- 229
1
vote
0
answers
223
views
IIS 10 - Windows Authentication error - Cannot login some user!
I've a IIS 10 service on a Windows Server 2016 in the domain.
There is a website with Windows Authentication.
The rule monitors that the incoming user is a member of the AD\xy group or not.
If member ...
- 11
1
vote
0
answers
245
views
IIS randomly returns 200 (instead of 503) when `app_offline.htm` is present
I have a site served using IIS, and when I am performing my periodic maintenance I put an app_offline.htm file at its root (this is necessary to indicate to google and other bots that the site should ...
- 105
1
vote
0
answers
3k
views
How do I configure IIS so that websocket conenctions are handled by an external program?
I can't really get my head around how websockets are configured and expected to work on the server.
In my case I have a machine (Windows 10) running IIS. On that machine I want to place my own ...
- 111