Microsoft KB Archive/840191

= Cannot access the Virtual Server Administration Web site in Virtual Server 2005 after you install the IIS Lockdown Tool =

Article ID: 840191

Article Last Modified on 11/2/2007

-

APPLIES TO


 * Microsoft Virtual Server 2005 Standard Edition

-





We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. All the default security-related configuration settings in IIS 6.0 meet or exceed the security configuration settings made by the IIS Lockdown Tool. Therefore, you do not have to run this tool on Web servers that run IIS 6.0. However, if you are upgrading from an earlier version of IIS, you should run the IIS Lockdown Wizard before the upgrade to enhance the security of the Web server.



SYMPTOMS
When you try to access the Virtual Server Administration Web site on a host computer that has the URLScan tool installed and is running Microsoft Virtual Server 2005, you may receive the following error message:

The page cannot be found

HTTP 404 - File not found



CAUSE
This issue may occur if you install the URLScan tool when you install the IIS Lockdown Tool on your computer. By default, the URLScan tool blocks access to .exe files in Microsoft Internet Explorer. The URLScan tool is an optional component that may be installed when you install the IIS Lockdown Tool.



RESOLUTION
To resolve this issue, disable the ability of URLScan to deny .exe files that could run on the server. To do this, follow these steps:  In a text editor such as Notepad, open the Urlscan.ini file.

Note The Urlscan.ini file is located in the C:\WINDOWS\system32\inetsrv\urlscan folder. Locate the Deny executables that could run on this server section. Insert a semicolon at the beginning of the line that contains .exe. Save the Urlscan.ini file. Restart the IIS Admin service. To do this, follow these steps:  Click Start, point to Programs, point to Administrative Tools, and then click Services.</li> In the Name list, right-click IIS Admin, and then click Restart.</li></ol> </li> Open the Virtual Server Administration Website.</li></ol>

<div class="moreinformation_section">

MORE INFORMATION
For more information about the IIS Lockdown Tool, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/tools/locktool.mspx

For more information about the URLScan tool, visit the following Microsoft Web sites:

http://www.microsoft.com/technet/security/tools/urlscan.mspx

http://www.microsoft.com/technet/security/tools/urlscan.mspx#XSLTsection123121120120

Additional query words: vs

Keywords: kberrmsg kbfix kbprb KB840191

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.