Questions tagged [iis-10]

IIS 10 is the version of Microsoft's Internet Information Services that ships with Windows Server 2016, and some Windows 10 versions

IIS 10 is the version of Microsoft's Internet Information Services that ships with Windows Server 2016, and some Windows 10 versions

188 questions
41
votes
5 answers

Remove/Modify IIS 10 Server Header which discloses IIS version

I'm trying to remove the "Server" header that discloses my IIS version. I'm using IIS Express 10 with ASP.NET Core 3.0 and have developed a Web API. I've tried the options below, but the header is still present in the response and reveals the…
RaJ
  • 511
16
votes
3 answers

What role does "App Pool Identity" play for an Application Pool?

When talking about IIS 7.5 security, AFAIK: App Pool Identity decides whom my web application runs as. Authentication Method decides whom the clients are authenticated as. I have a virtual folder configured like this: I use Anonymous Authentication…
smwikipedia
  • 656
  • 4
  • 8
  • 15
7
votes
2 answers

IIS 10 - Deny all IP restriction

I come from the Windows 2003 Server world and it's IIS version is much different then IIS 10 on Windows 2016 Server. The 2003 server appears to have denied all IP addresses by default. How to I deny all IP's in IIS 10. I have a few IP ranges I would…
6
votes
2 answers

IIS Application Initialization isn't running even though all settings are configured

The end goal is to make it so that whenever my app pool is recycled (which should happen whenever I release an update for the site), my site gets visited once to "warm up". Typically the first visit after a recycle takes 2.5 seconds and then…
5
votes
2 answers

IIS reports "404 Not Found" error for folders created in WSL Bash

After the most recent update Win10 update (1803) IIS started reporting error "404 Not Found" for folders created in WSL Bash (Windows Subsystem for Linux). Folder security settings (in Windows Explorer) look fine. I've even tried doing a "Replace…
knee-cola
  • 241
4
votes
0 answers

Microsoft IIS HTTP/2 Vulnerabilities Registry Keys Recommended Values

Microsoft "fixed" the HTTP/2 vulnerabilities recently discovered. The updates add the ability to create the registry keys to stop the vulnerabilities, they don't actually fix the vulnerabilities after updating.…
NinjaBomb
  • 169
  • 2
  • 5
  • 17
4
votes
1 answer

What is the meaning of an IIS http status code 404.503?

Microsoft lists the IIS http status codes including the substatus codes here. In the 404 section there are substatus codes between 0 and 20, but in my logs I get a 503 as sc-substatus I can't find any information about it. Don't confuse this with…
4
votes
2 answers

What steps to take when trying to resolve unresponsive/hung/broken IIS web site?

What steps do you take when you find an IIS web site is not responding? I might try to first telnet to the specified port, then check web site binding and authentication, and at last restart it. I think knowing what an experienced admin would…
4
votes
0 answers

How do I configure IIS so that websocket conenctions are handled by an external program?

I can't really get my head around how websockets are configured and expected to work on the server. In my case I have a machine (Windows 10) running IIS. On that machine I want to place my own websocket server application (WS-Server.exe), which…
Magnus
  • 141
4
votes
1 answer

Removing IIS10 Self-signed Certificate "WMSCV-SHA2-webserver"

On my IIS server, there are two certificates. One is issued by a real CA based on my request and is used as the SSL cert on the server's website. The other is a self-signed certificate with the name "WMSCV-SHA2-webserver". This doesn't expire for…
3
votes
2 answers

ERR_CONNECTION_RESET When Using HTTPS Hosted by IIS 10 and Windows Server 2019

I have a site hosted in IIS 10 on a server running Windows Server 2019. I've set up an HTTPS certificate with Let's Encrypt. Attempts to view the site with http:// work normally, but when I enter https://, I get an ERR_CONNECTION_RESET error in…
3
votes
0 answers

Broken Shared Configuration

Infrastructure We have 4 webservers (WEB1-4). We have Shared Configuration turned on on all those webservers to a shared network path (\\fs100\Config\Web - Config). Problem From time to time, a random webserver stops getting updates from the Shared…
3
votes
1 answer

Why is IIS NOT reading/using the site's Web.config, while IIS Manager is correctly accessing the Web.config?

After "more time than was prudent" debugging an issue with handlers not being applied correctly, I've determined that the SiteRoot/web.config shown in IIS Manager is not actually used by IIS. How do I know this? I've replaced Web.config with invalid…
3
votes
0 answers

IIS on Windows 2019 stops logging web requests in September

scary problem with IIS on Windows 2019 Standard, IIS is not writing W3C log files! I did see this similar item, but did not need to make new directories Three Windows Standard 2019 servers running under ESXi 6.7. Patches applied from August 2020,…
3
votes
1 answer

IIS - Request filtering is configured on the Web server to deny the request because the content length exceeds the configured value

(For starters, I have found a lot of info here on SO, and have followed a lot of the information to no avail.) I am getting the following error when I upload multiple files to the server. HTTP Error 404.13 - Not Found The request filtering module…
CodingEE
  • 231
1
2 3
12 13