IIS & UrlScan
 

MegaSack DRAW - This year's winner is user - rgwb
We will be in touch

[Closed] IIS & UrlScan

7 Posts
5 Users
0 Reactions
71 Views
Posts: 3210
Free Member
Topic starter
 

A server at work has UrlScan enabled and this stops the downloading of .exe files via IIS.

However, I need to allow one specific .exe file to be downloaded.  I think this is possible by adding an exception into the config file but I'm struggling to find any definitive answers via google.

This is a production box so I'd rather not get this wrong!  I was hoping someone here may be able to point me in the right direction.

Thanks in advance.

GQ


 
Posted : 21/06/2018 8:27 am
Posts: 77697
Free Member
 

Zip the executable?


 
Posted : 21/06/2018 10:11 am
Posts: 3210
Free Member
Topic starter
 

I've zipped it for now but would just be easier for end users to download and execute the file (which then, in turn, downloads additional resources from the site - it's a VSTO Add-In for Excel).

Was just hoping to keep things simples - adding extra steps just causes more headaches as this software needs rolling out to lots of people, some of which might not be able to (or know how to) unzip the archive.


 
Posted : 21/06/2018 6:24 pm
Posts: 8024
Full Member
 

Can it be packaged as an MSI? Or perhaps clickonce.


 
Posted : 22/06/2018 7:55 am
Posts: 77697
Free Member
 

this software needs rolling out to lots of people

That's what Group Policy is for.


 
Posted : 22/06/2018 9:20 am
Posts: 0
Free Member
 

That’s what Group Policy is for.

Nah that's what confimgr is for it's not 2002 anymore 😉

So the exe downloads other stuff and installs it, do all your users have admin rights (shudders!)


 
Posted : 22/06/2018 9:33 am
Posts: 3210
Free Member
Topic starter
 

That’s what Group Policy is for.

Indeed, but this software needs to be distributed via t'interweb.

So the exe downloads other stuff and installs it, do all your users have admin rights (shudders!)

Correct - but it doesn't need admin rights to install.


 
Posted : 22/06/2018 9:40 am
Posts: 3735
Free Member
 

Surely the solution de jour is to just wrap it up in a choco package, throw it in a repo and then try and get users to run some arcane parameterised args list


 
Posted : 22/06/2018 11:00 am