Questions tagged [iis-10]

IIS 10 is the version of Microsoft's Internet Information Services that ships with Windows Server 2016, and some Windows 10 versions

IIS 10 is the version of Microsoft's Internet Information Services that ships with Windows Server 2016, and some Windows 10 versions

140 questions
19
votes
4 answers

Remove/Modify IIS 10 Server Header which discloses IIS version

I'm trying to remove the Server Header which discloses IIS version but couldn't. I'm using IIS Express 10 with ASP.NET Core 3.0 and have developed a Web API. I've tried below options but still header is present in response and reveals the Version…
RaJ
  • 291
  • 1
  • 2
  • 5
16
votes
3 answers

What role does "App Pool Identity" play for an Application Pool?

When talking about IIS 7.5 security, AFAIK: App Pool Identity decides whom my web application runs as. Authentication Method decides whom the clients are authenticated as. I have a virtual folder configured like this: I use Anonymous Authentication…
smwikipedia
  • 626
  • 4
  • 8
  • 15
7
votes
1 answer

IIS 10 - Deny all IP restriction

I come from the Windows 2003 Server world and it's IIS version is much different then IIS 10 on Windows 2016 Server. The 2003 server appears to have denied all IP addresses by default. How to I deny all IP's in IIS 10. I have a few IP ranges I would…
Off The Gold
  • 183
  • 1
  • 1
  • 8
6
votes
2 answers

IIS reports "404 Not Found" error for folders created in WSL Bash

After the most recent update Win10 update (1803) IIS started reporting error "404 Not Found" for folders created in WSL Bash (Windows Subsystem for Linux). Folder security settings (in Windows Explorer) look fine. I've even tried doing a "Replace…
knee-cola
  • 221
  • 1
  • 6
4
votes
1 answer

What is the meaning of an IIS http status code 404.503?

Microsoft lists the IIS http status codes including the substatus codes here. In the 404 section there are substatus codes between 0 and 20, but in my logs I get a 503 as sc-substatus I can't find any information about it. Don't confuse this with…
Peter Hahndorf
  • 13,763
  • 3
  • 37
  • 58
4
votes
2 answers

What steps to take when trying to resolve unresponsive/hung/broken IIS web site?

What steps do you take when you find an IIS web site is not responding? I might try to first telnet to the specified port, then check web site binding and authentication, and at last restart it. I think knowing what an experienced admin would…
Yasser Sobhdel
  • 167
  • 1
  • 8
4
votes
2 answers

IIS Application Initialization isn't running even though all settings are configured

The end goal is to make it so that whenever my app pool is recycled (which should happen whenever I release an update for the site), my site gets visited once to "warm up". Typically the first visit after a recycle takes 2.5 seconds and then…
3
votes
0 answers

Microsoft IIS HTTP/2 Vulnerabilities Registry Keys Recommended Values

Microsoft "fixed" the HTTP/2 vulnerabilities recently discovered. The updates add the ability to create the registry keys to stop the vulnerabilities, they don't actually fix the vulnerabilities after updating.…
NinjaBomb
  • 149
  • 2
  • 5
  • 17
3
votes
0 answers

Broken Shared Configuration

Infrastructure We have 4 webservers (WEB1-4). We have Shared Configuration turned on on all those webservers to a shared network path (\\fs100\Config\Web - Config). Problem From time to time, a random webserver stops getting updates from the Shared…
3
votes
0 answers

IIS on Windows 2019 stops logging web requests in September

scary problem with IIS on Windows 2019 Standard, IIS is not writing W3C log files! I did see this similar item, but did not need to make new directories Three Windows Standard 2019 servers running under ESXi 6.7. Patches applied from August 2020,…
2
votes
0 answers

IIS 10 - domain with ß results in 400 "Bad Request - Invalid Hostname"

We try to use hostheader with the german umlaut ß (sharp s, "Eszett") like www.straße123.de in IIS 10 websites. The hostheader is accepted in IIS, the DNS entry or HOSTS entry on client with punycode is accepted and works. But regardless if the…
StefanK
  • 125
  • 1
  • 2
  • 8
2
votes
0 answers

Initializing windows server 2019 for hosting multiple website multiple domain names and single IP

I want to set up a virtual machine to host windows server 2019 to host multiple websites in IIS 10. Each website can be reached with a domain name for example: www.website1.com www.website2.com www.website3.com This server just has these…
2
votes
0 answers

How to properly configure IIS to have requests go to a web service 2 folders down

I'm moving an old .Net 2 web service from a Windows 2008 R2 server to a new Windows 2016 Datacenter server. It has something else set up on the Default Web Site, but I have created an additional one for the web service. (This is exactly the same…
atariguy
  • 160
  • 1
  • 8
2
votes
1 answer

Central Certificate Store Failures and Logging

I've got IIS 10 on a Server 2019 instance with a Centralized Certificate Store configured. The CCS looks valid in IIS. Certs are loaded and display no warnings or errors, but requests to any site returns a TCP reset. If I manually install the cert…
Joel
  • 133
  • 1
  • 3
  • 8
2
votes
1 answer

Limit a single users FTP access on IIS10 to a IP address

Can I limit a user so they can only access my FTP server from a set IP address whist allowing other users to access the FTP from anywhere? I have a Windows Server 2019 server running IIS 10 with an FTP site setup on it. the FTP server has Ftp User…
Re0sless
  • 123
  • 5
1
2 3
9 10