Questions[default-document](server)

I’m able to query the default document list in IIS using the following PowerShell code:

Get-WebConfigurationProperty -Filter "//defaultDocument/files/add" -PSPath 'MACHINE/WEBROOT/APPHOST' -Name "value" | select value

…but I want to disable the default document feature altogether to address a vulnerability. I’ve not found much on disabling the feature via PowerShell but MS documentation says the following can be run to remove a value:

remove-webconfigurationproperty /system.webServer/defaultDocument -name files -atElement @{value="foo.html"}

Is this really the only way to disable the feature? I’ve not found anything that suggests it can simply be disabled like you can in the IIS administration console.

On an IIS 10.0 server hosting https://example.com, what do I put in my applicationHost.config so that all of the following is true:

• https://example.com/ does not request a client certificate.
• https://example.com/index.html does not request a client certificate.
• Everything else , https://example.com/* , requests and requires a client certificate.
• https://example.com/index.html is the default document for https://example.com/

<configuration>
   <location path="">
      <system.webServer>
         <defaultDocument enabled="true">
            <files>
               <add value="index.html" />
            </files>
         </defaultDocument>
         <security>
            <access sslFlags="Ssl, SslNegotiateCert, SslRequireCert, Ssl128">
         </security>
      </system.webServer>
   </location>
   <location path="index.html">
      <system.webServer>
         <security>
            <access sslFlags="Ssl, Ssl128">
         </security>
      </system.webServer>
   </location>
   <location path="/">
      <system.webServer>
         <security>
            <access sslFlags="Ssl, Ssl128">
         </security>
      </system.webServer>
   </location>
</configuration>

does not work because <location path="/"> is not allowed.

I've been trying to get ASP.NET 4.0 to work on Windows Server 2003 R2, 64-bit OS, IIS 6.0 in 32-bit mode. The latest thing I tried in the process was to run aspnet_regiis -s "W3SVC/12345/root" to try to change the version of ASP.NET being run on the site. This seems to have worked, and ASP.NET 4.0 code is now running properly.

However, this seems to have caused a new problem. IIS is no longer recognizing default documents of any type! I have Coldfusion installed on the server and it's default documents are not working either. When I visit http://www.myserver.com or http://www.myserver.com/subfolder, I get "404, file not found". But when I visit http://www.myserver.com/index.cfm or http://www.myserver.com/subfolder/Default.aspx, it works. I've looked at the "documents" tab in the site properties in IIS and both index.cfm and default.aspx are listed there. Why won't IIS recognize them? This was working before, how did I break it?

Edit 1:

I've found that if I create a new site in IIS with all the same settings but running on a different port - ie. http://www.myserver.com:8080/ - the default documents for ColdFusion work again. However ASP.NET default documents still don't work on the newly created site. I have to manually type in http://www.myserver.com:8080/subfolder/Default.aspx instead of http://www.myserver.com:8080/subfolder/.

I have a classic ASP website that is crashing in IIS7. It is crashing because IIS doesn't allow file uploads greater than a certain size. I know this because files below about 200k work fine. I removed the Status Code 500 error in IIS but I still don't get a file name and the line where my code failed as I do when running locally.

Instead I get:

"The page cannot be displayed because an internal server error has occurred. If you are the system administrator please click here to find out more about this error."

See http://adcore-com-au.si-sv3956.com/admin/edit_options.asp for an example.

See http://www.yart.com.au/admin/edit_options.asp for what it should look like.

How do I get a file name and the line where my code failed?

Here are my IIS settings:

_{(source: yart.com.au)}

My client has just got a new dedicated server running Win2008 (we had 2003 before), II7, etc. I started setting a little ASP.NET 2.0 web application we have. Running on its own AppPool 2.0.

The problem is that when I browse the site root (locally or remotely), I get 404 because the url now points to http://domain/default.php, when it should be default.aspx.

Yes, I've checked the Defaults Documents settins for the website and I deleted everything but default.aspx (default.php was not even listed).

To finish, I'll say that if I navigate to http://domain/default.aspx, the site works perfectly and I can follow links without problem.

Any idea why is this happening? Or at least where I should start looking?

Thanks!

UPDATE

• I've already tried resetting IIS.

• I've checked the web.config looking for some default.php, nothing found. It's the same web.config copied from the old server which has not this problem. In fact, there is default.aspx being explicity declared on the web.config as follow:

  <system.webServer>
      <defaultDocument enabled="true">
          <files>
              <clear />
              <add value="default.aspx" />
          </files>
      </defaultDocument>
  </system.webServer>
  

• The problem seems to happen only with that website. The default website root resolves well to its default document (iisstart.htm)