• TechBlog: Apple changes the way it pushes Safari at Windows users
  Apple makes a token jesture to make it's pushing of Safari to Windows machines more palatable.
  (tags: Apple Safari Updates )
• Businesses warned not to skip Vista - CIO UK Magazine
  Forrester Research issued a report saying don't wait for Windows 7, plan your rollout of Vista now.
  (tags: Deployment Review )

Keep reading →

Corrine explains a security advisory issued yesterday that could allow elevation of privileges in Vista if you run IIS or SQL Server. Microsoft has a few workaround suggestions. Keep reading →

Microsoft Internet Information Services: A set of Internet-based services for servers using Microsoft Windows.

You have an application that is built on the Microsoft .NET Framework 2.0 and that is hosted on Internet Information Services (IIS) 7.0. The first time that you access a Microsoft ASP.NET page in the application, you receive an HTTP 400 error message. However, later requests succeed.

• 4sysops - Vista SP1 performance comparison with Vista RTM
  More SP1 performance info, this from a German magazine that suggests there isn’t much to gain performance wise with SP1.
  (tags: Performance SP1 )
• IIS 7.0 Manager Released, RSAT Soon Too?
  Thankfully I don’t have to deal with IIS, but if you do, this may be good news for you.
  (tags: IIS )

Keep reading →

Thankfully I don’t have to deal with IIS, but if you do, this may be good news for you. Keep reading →

Description: This important update resolves a privately reported vulnerability in Internet Information Services (IIS). A local attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. Keep reading →

On Tuesday Windows Vista will receive five updates as part of the monthly Security Bulletin. Vista itself is to receive 3 critical and two important, while the other two are for features installed by default with Vista. In addition to these updates, Office users will get a number more for a total of twelve security bulletins. Here’s how they break down: Keep reading →

When you modify the configuration for any delegated feature, Internet Information Services (IIS) 7.0 removes custom values in the Web.config file.

For example, consider the following scenario. The following information is part of the Web.config file:

<applicationSettings>
    <TestObject.Settings>
      <setting name="TestSetting" serializeAs="String">
        <value>TestValue</value>
      </setting>
    </TestObject.Settings>
</applicationSettings>

You take one of the following actions:

• You modify a delegated feature from the user interface (UI).
• You modify the Appcmd.exe file.
• You modify programmatic means.

In this scenario, the information in the Web.config file changes to the following:

<applicationSettings>
    <TestObject.Settings>
      <setting name="TestSetting" serializeAs="String">
        <value></value>
      </setting>
    </TestObject.Settings>
</applicationSettings>

Consider the following scenario:

• You host a Common Gateway Interface (CGI) application on an Internet Information Services (IIS) 7.0 Web server.
• After the CGI application processes a request, the CGI application sets multiple instances of a response header as part of its response.

In this scenario, only the last instance of the response header is sent to the client.

For example, the CGI application sets multiple “Set-cookie” response headers. However, the client receives only the last cookie value.