IIS
16 posts tagged with this.
-
Mitigating Recent ASP.NET Core Auth Header Risks
A recent advisory details flaws in how ASP.NET Core applications process authentication headers under specific load conditions. Production sites must apply updates and tighten configuration to prevent bypasses.
-
PowerShell Automation for IIS on Windows Server
PowerShell cmdlets simplify IIS site creation, security configuration, and Active Directory integration on Windows Server. Administrators can replace manual IIS Manager steps with repeatable scripts that enforce consistent settings across hosts.
-
Mitigating Recent .NET Request Smuggling Risks
A recent advisory highlights HTTP/2 request smuggling flaws affecting ASP.NET Core applications on IIS. Production sites must apply updates and adjust server configuration to prevent request manipulation and unauthorized access.
-
PowerShell-Driven IIS Config on Windows Server 2025
Windows Server 2025 strengthens IIS security and management through tighter Active Directory integration. This post covers practical PowerShell techniques for configuring sites, bindings, and authentication in production hosting environments.
-
Mitigating Recent ASP.NET Core Header Parsing Risks
A recent Microsoft security advisory highlights risks in ASP.NET Core header handling that can lead to authentication bypass on production sites. Learn who is affected and the exact configuration changes required to close the exposure.
-
PowerShell for IIS Configuration on Windows Server
PowerShell provides reliable automation for managing IIS sites, application pools, and security on current Windows Server releases. This guide covers practical cmdlets and scripts that system administrators use to maintain consistent hosting environments.
-
Mitigating the 2026 ASP.NET Core Deserialization Advisory
A deserialization flaw disclosed in March 2026 affects ASP.NET Core applications running on .NET 9 and earlier. Production sites must update to the current LTS release and tighten serialization settings to prevent remote code execution.
-
PowerShell Automation for IIS on Windows Server 2025
System administrators running Windows Server 2025 can use PowerShell to automate IIS site provisioning and Active Directory authentication setup. These scripts reduce configuration drift and enforce consistent security policies across hosted .NET applications.
-
Automating IIS with PowerShell on Windows Server 2022
PowerShell scripts offer a consistent method for configuring IIS on Windows Server 2022. This reduces configuration drift and allows administrators to apply security and performance settings reliably across all web servers.
-
Automating IIS with PowerShell on Windows Server 2022
Automate IIS configuration on Windows Server 2022 with PowerShell for consistent, repeatable deployments. This guide details server preparation, isolated app pool creation with AD accounts, automated site provisioning with HTTPS, security hardening, and config locking. Scripts eliminate drift, reduc
-
Securing IIS with Active Directory and PowerShell
Integrate Active Directory with IIS for centralized Windows Authentication and role-based access on Windows Server. This guide details IIS Manager steps, web.config rules for AD groups, and PowerShell automation using the WebAdministration module to disable anonymous access, prioritize Kerberos, and
-
Why You're Getting a 404.3 Error on Your PHP Website
HTTP Error 404.3 occurs because PHP is not enabled for your site. IIS has no handler to process .php files, so it cannot serve the page. Enable PHP in the control panel under the Handler Mappings tab to resolve it immediately. This guide details the cause, provides exact steps, lists common pitfalls
-
Fix 'An Unexpected Error Occurred on Send' in IIS Remote Management
The 'An unexpected error occurred on send' error when connecting to IIS Remote Management is caused by .NET using outdated TLS versions unsupported by the servers. Resolve it by setting SchUseStrongCrypto and SystemDefaultTlsVersions registry keys with these PowerShell commands, then restart.
-
Cannot Find or Select .NET 3.5 or .NET 4.5
This is expected behavior. .NET 3.5 extends .NET 2.0 so enabling 2.0 provides access to its libraries and features. .NET 4.5 replaces .NET 4.0 so any 4.x selection activates 4.5 capabilities. This guide details the version mappings, control panel choices, web.config examples, and troubleshooting for
-
Mitigating CVE-2023-44487: HTTP/2 Rapid Reset on .NET Servers
CVE-2023-44487 enables devastating DDoS attacks by exploiting HTTP/2 stream resets. Learn exactly which .NET and Windows components are vulnerable, the precise configuration changes required, and code examples that add rate limiting to your ASP.NET Core applications for robust protection.