I decided to look into impersonation a bit more and how I could force our Windows Platform to impersonate, without letting our users change it back in their web.config file. I found a good number of google searches, but nothing really stuck until I realized I could simply add in the web.config of the machine [...]
Well more fun for me! We had an outbreak of script kiddies using the global.asa file to attempt to download and execute remote code. It turns out a few accounts had a file called style.asp in their root folder which contained a very simple method of executing commands under that account. If anyone else has [...]
The 401.2 error is: You are not authorized to view this page due to invalid authentication headers. If you are getting this error, and you just happen to have used shared configuration it may be an invalid password/encryption key file. I had this issue today, we replaced an IIS7 node and copied over the config [...]