1 2 3 Previous Next 41 Replies Latest reply on Nov 5, 2012 3:45 PM by kristian

    IIS Directory Browsing stopping - needing ideas

    cyberdemon Apprentice

      "My fellow LANDesk-icans"...   "I am not a crook....."

       

      LD9 setup:

      Server 2008 Standard R2, sp1

      LD9 sp3

      IIS Services 7

      SQL 2008

      Running on VMware

      Network attached storage

       

      I have a strange issue that our LD support hasn't seen before and no solution from them yet.

       

      Within IIS, our \\<coreserver>\patch directory accessed via HTTP:// has issues. I've followed the standard setup guides (articles slip me at the moment) and also verified by a LANDesk technician, that they are configured correctly. For no apparent reason, the Directory Browsing shuts off, after being enabled. It doesn't happen right away, in fact it's likely a full day randomly at any point it will shut off.

      1) Not a GPO, as it is in an OU that has GPO's ignored

      Capture2.PNG

      At first, I thought it was this (exerpt of my email to LD support):

      Server 2008 has the service called Computer Browser, is disabled BY DEFAULT in Server setup. Either this was an initial setup error on my part (assuming this is documented for LANDesk to work) on Server 2008, or it is an assumption when running IIS that I didn’t catch. Either way, I’m sure this is the problem.

       

      Interestingly, even with the service turned off, the Directory Browsing would work for a period of time (likely 24 hours or so), before flipping to off within IIS manager. So, you could http browse to the directory even with Computer Browser disabled. At some point, there must be a timeout, that switches Directory Browsing off, since the actual service is not running. The Dependencies of Computer Browser service are : Server and Workstation services. These, by default after a 2008 install, are enabled and start automatically. However, Computer Browser is turned off in 2008 by default.

       

      After enabling this service, enabling the IIS browsing, waiting a day; come in the next day and it's flipped off again. I have another web accessed share as you can see from this pic

      Capture.PNG

      called Packages with the same setup and it doesn't flip off the Directory Browsing

       

      Any ideas on this ? Any suggestions would be appreciated.

       

      As you can imagine, not having that work, will "break" my global preferred server clients (Europe, UK, India, Germany), as they try to pull from the Core rather than the Preferred server, causing timeouts and all kinds of junk. My understanding is, having this UNC share and HTTP share enabled and working, then the clients would not attempt the Core, as it would help "force" the clients to pull from the Preferred. At least the way I understand it.

        • 1. Re: IIS Directory Browsing stopping - needing ideas
          Apprentice

          What a strange behaviour...!

          Computer Browser should be disabled by default, so don't think that is related.

           

          I would have a look at the file:

          C:\Windows\System32\inetsrv\config\applicationHost.config

           

          Search for a text such as:

              <location path="Default Web Site/patches">

                  <system.webServer>

                      <directoryBrowse enabled="true" showFlags="None" />

           

          Also, look for a web.config in the local directory.

          <configuration>

              <system.webServer>

                  <directoryBrowse enabled="true" />

           

          The dates on these files might help you to find our when the change happens.

          This could be correlated to the event log to hopefully solve to problem.

          I know this isn't a a solution, but hopefully it's at least a bit helpful

           

          Very dirty solution might be to change the NTFS on web.config so noone can change the file, just read it.

          But, again... I hate those kind of fixes so I won't recommend it

          • 2. Re: IIS Directory Browsing stopping - needing ideas
            cyberdemon Apprentice

            looked at the file you mentioned.....

             

            I don't have either entry you mention above. what i do have is this....

             

            with regards searching for keywords for patch and packages, all entries with /patch and /packages

             

                    <sites>

                        <site name="Default Web Site" id="1">

                            <application path="/">

                                <virtualDirectory path="/" physicalPath="%SystemDrive%\inetpub\wwwroot" />

                                <virtualDirectory path="/Patch" physicalPath="E:\Patch" />

                                <virtualDirectory path="/Packages" physicalPath="E:\Packages" />

             

            but, that's it. No entries, exactly as you mention, are there.

            • 3. Re: IIS Directory Browsing stopping - needing ideas
              Apprentice

              Did you find any lines with "directoryBrowse" in them?

               

              How about an web.config in the folder where the patches are located?

              • 4. Re: IIS Directory Browsing stopping - needing ideas
                cyberdemon Apprentice

                        <sectionGroup name="system.webServer">

                            <section name="asp" overrideModeDefault="Deny" />

                            <section name="caching" overrideModeDefault="Allow" />

                            <section name="cgi" overrideModeDefault="Deny" />

                            <section name="defaultDocument" overrideModeDefault="Allow" />

                            <section name="directoryBrowse" overrideModeDefault="Allow" />

                            <section name="fastCgi" allowDefinition="AppHostOnly" overrideModeDefault="Deny" />

                            <section name="globalModules" allowDefinition="AppHostOnly" overrideModeDefault="Deny" />

                            <section name="handlers" overrideModeDefault="Deny" />

                            <section name="httpCompression" allowDefinition="AppHostOnly" overrideModeDefault="Deny" />

                            <section name="httpErrors" overrideModeDefault="Allow" />

                            <section name="httpLogging" overrideModeDefault="Deny" />

                            <section name="httpProtocol" overrideModeDefault="Allow" />

                            <section name="httpRedirect" overrideModeDefault="Allow" />

                            <section name="httpTracing" overrideModeDefault="Deny" />

                            <section name="isapiFilters" allowDefinition="MachineToApplication" overrideModeDefault="Deny" />

                            <section name="modules" allowDefinition="MachineToApplication" overrideModeDefault="Deny" />

                            <section name="odbcLogging" overrideModeDefault="Deny" />

                            <sectionGroup name="security">

                                <section name="access" overrideModeDefault="Deny" />

                                <section name="applicationDependencies" overrideModeDefault="Deny" />

                                <sectionGroup name="authentication">

                • 5. Re: IIS Directory Browsing stopping - needing ideas
                  cyberdemon Apprentice

                  <system.webServer>

                   

                          <asp>

                              <cache diskTemplateCacheDirectory="%SystemDrive%\inetpub\temp\ASP Compiled Templates" />

                          </asp>

                   

                          <caching enabled="true" enableKernelCache="true">

                          </caching>

                   

                          <cgi />

                   

                          <defaultDocument enabled="true">

                              <files>

                                  <add value="Default.htm" />

                                  <add value="Default.asp" />

                                  <add value="index.htm" />

                                  <add value="index.html" />

                                  <add value="iisstart.htm" />

                                  <add value="default.aspx" />

                              </files>

                          </defaultDocument>

                   

                          <directoryBrowse enabled="false" />

                  • 6. Re: IIS Directory Browsing stopping - needing ideas
                    cyberdemon Apprentice

                    PublicKeyToken=b77a5c561934e089" preCondition="managedHandler" />

                            </modules>

                            </system.webServer>

                        </location>

                        <location path="Default Web Site/incomingdata">

                            <system.webServer>

                                <directoryBrowse enabled="true" showFlags="None" />

                                <handlers accessPolicy="Read, Execute" />

                                <httpLogging dontLog="false" />

                                <security>

                                    <authentication>

                                        <windowsAuthentication enabled="false" />

                                        <anonymousAuthentication enabled="true" />

                                        <digestAuthentication enabled="false" />

                                        <basicAuthentication enabled="false" />

                                    </authentication>

                                </security>

                                <defaultDocument enabled="true">

                                    <files>

                                        <clear />

                                        <add value="Default.htm" />

                                        <add value="Default.asp" />

                                        <add value="index.htm" />

                                        <add value="iisstart.htm" />

                                        <add value="Default.aspx" />

                                    </files>

                                </defaultDocument>

                    • 7. Re: IIS Directory Browsing stopping - needing ideas
                      cyberdemon Apprentice

                      </location>

                          <location path="Default Web Site/incomingdataSecure">

                              <system.webServer>

                                  <directoryBrowse enabled="false" showFlags="None" />

                                  <handlers accessPolicy="Read, Execute" />

                                  <httpLogging dontLog="false" />

                                  <security>

                                      <authentication>

                                          <windowsAuthentication enabled="true" />

                                          <anonymousAuthentication enabled="false" />

                                          <digestAuthentication enabled="false" />

                                          <basicAuthentication enabled="false" />

                                      </authentication>

                                  </security>

                                  <defaultDocument enabled="true">

                      • 8. Re: IIS Directory Browsing stopping - needing ideas
                        cyberdemon Apprentice

                        location path="Default Web Site/landesk">

                                <system.webServer>

                                    <directoryBrowse enabled="true" showFlags="None" />

                                    <handlers accessPolicy="Read, Script" />

                                    <httpLogging dontLog="false" />

                                    <security>

                                        <authentication>

                                            <windowsAuthentication enabled="false" />

                                            <anonymousAuthentication enabled="true" />

                                            <digestAuthentication enabled="false" />

                                            <basicAuthentication enabled="false" />

                                        </authentication>

                                    </security>

                        • 9. Re: IIS Directory Browsing stopping - needing ideas
                          cyberdemon Apprentice

                          <location path="Default Web Site/OSDeployment">

                                  <system.webServer>

                                      <directoryBrowse enabled="true" showFlags="None" />

                                      <handlers accessPolicy="Read, Script" />

                                      <httpLogging dontLog="false" />

                                      <security>

                                          <authentication>

                                              <windowsAuthentication enabled="false" />

                                              <anonymousAuthentication enabled="true" />

                                              <digestAuthentication enabled="false" />

                                              <basicAuthentication enabled="false" />

                                          </authentication>

                          • 10. Re: IIS Directory Browsing stopping - needing ideas
                            cyberdemon Apprentice

                            etc, etc. Many more with "directoryBrowse".

                             

                             

                            There is no web.config in E:\Patch

                            • 11. Re: IIS Directory Browsing stopping - needing ideas
                              Apprentice

                              Might be useful to paste the section with the virtual directory you're having problem with.

                              Are those mentioned in the file?

                              Something like:

                              <location path="Default Web Site/Patch">

                               

                              When I set "directory browsing" to "enabled" on my server, it creates a web.config in the folder.

                              Can you try enabling it again and see if it is created?

                              • 12. Re: IIS Directory Browsing stopping - needing ideas
                                cyberdemon Apprentice

                                when i enable it, it did create the file. here is the contents of that file.

                                <?xml version="1.0" encoding="UTF-8"?>

                                <configuration>

                                    <system.webServer>

                                        <directoryBrowse enabled="true" />

                                    </system.webServer>

                                </configuration>

                                 

                                 

                                As for the applicationhost.config that contains "Default Web Site/Patch", it doesn't contain that entry.

                                 

                                might have missed when I said, or I wasn't clear (sorry).

                                 

                                "I don't have either entry you mention above. what i do have is this....

                                 

                                with regards searching for keywords for patch and packages, all entries with /patch and /packages"

                                • 13. Re: IIS Directory Browsing stopping - needing ideas
                                  JSMCPN Expert

                                  Do you have any processes performing data replication (with mirroring) from a source to the Core?  Perhaps your have a web config file being overwritten by one that has browsing disabled.  Just a thought... I've seen Preferred Servers web.config files being deleted by Content Replication (mirroring) because the source directory did not contain a web.config file.

                                  • 14. Re: IIS Directory Browsing stopping - needing ideas
                                    cyberdemon Apprentice

                                    JSMCPN, no.

                                     

                                    Only robocopy replication from Core to Preferred.

                                    1 2 3 Previous Next