Hey there,
I'm working into a system's deployment based on windows 2003, hosting IIS
6.0,  patches up-to-date, kerberos-enabled authentication, nothing out of the
standards;

I have a parent/child domain configuration on corporate LAN. I am also
running an Intranet webapp the employees from the parent domain log on to
using their Active Directory credentials for authentication.
I recently added a child domain of the parent domain. The child domain is

Good morning all,
We have been having a problem with a repeat vulnerability on one of our IIS
6.0 boxes:
---------

I have created a FTP site with AD User isolation.
Everything works great for the first two users.
The third user keeps getting the error 530 User cannot log in, home
directory inaccessible.

Summary: When processing an SSL certificate response in IIS, a private key is
not generated with the certificate and, therefore, SSL does not function on
the site.  IIS and Certificates.mmc believe there is a private key, but when
I try to export one it fails with "The associated ...

Can a SSL certificate be transferred from a Win2k3 IIS box to Win2k8 IIS?
Troy

I have put together a small internal web site that runs on Windows 2003
Server. I am having problems accessing it. It only works for me because I am
a local admin. For other users I am getting accesss denied. Can someone
help, please?

ADO connection string uses a drive that is mapped to an XP machine's share.  
I have set up IUSR_myserver as a local user on the XP machine, the shared
folder is set for everyone to modify, even Guest, but I still get that
8004005 error.  Any suggestions?

Is it possible to redirect from http (port 80) till https/ssl (port 443)
using a 301-redirect? How?
I want to preserve the full url path and query parameters to the new https
url.

I recently installed KB955069, KB957097, KB951535 and lost SSL access to my
Outlook Web (I have had it setup as SSL only).  Uninstalling these updates
did not resolve the issue.  The security patches all relate to XML issues.  
My standard public web sites are not affected.  Any ...

Am having problems with IIS Worker Process crashing.
Have been advised to put w3wp.exe into the data execution prevention
exception list. Doing that generates a warning. Does anyone have any advice
about the security risks here?

I have a server that I am using to test a new website. I have configured the
site to deny all IP addresses unless specifically allowed. This works great
for all outside addresses and for local client machines, but I am not able to
access the site from the localhost server itself. ...

What permissions need to be set in order to successfully configure the "Share
Located On Another Computer' home directory permissions?  We have pointed the
share to the remote computer, and the folder works okay when accessing the
folder from the remote machine's local IIS ...

We have a load balanced webfarm running on IIS 6.0 we currently bind specific
IPs to each site on a given box. A given box will have multiple domains (ex:
sitea.domaina.com and siteb.domainb.com). We would like to use wildcard certs
(ex: *.domaina.com and *.domainb.com) on the ...

I've already posted at MSDN with no response.
If anyone has a clue, please let me know.
Environment: Windows Server 2003SP2 Standard with IIS6, SQL Server Express,
SQL