IIS ??????? ????? ?? URLScan ??????? ????? Microsoft Project Server ?? Microsoft Project ???? ??? ??? ???????? ?? ???????? ???? ?? ??? ???? ????

???? ?????? ???? ??????
???? ID: 316398 - ?? ???????? ?? ?????? ??? ?? ?? ???? ???? ???? ??.
?? ?????? ??????? ???? ??? ?? ??? ???????????? ?? ??? Microsoft ??????? ?????????? ???????? (IIS) 6.0 ???????? Microsoft Windows Server 2003 ?? ?? ??? ??? IIS 6.0 ???????????? ??? ?????? ??????? ?????? ??? IIS ???????-?????? ?????? ?? ???? ??? ???? ??????? ?? ??? ????? Microsoft ??? ???? ?? ????:
HTTP://www.Microsoft.com/technet/Security/prodtech/IIS.mspx
??? ?? ??????? ???? | ??? ?? ??????? ????

?? ????? ??

??????

?? ???? ??? Microsoft ??????? ?????????? ???????? (IIS) ??????? ????? ?? ???????? ???? ???? ?? Microsoft Project Server ?? Microsoft Project ???? ??? ??? ???????? ?? URLScan ??????? ????? ?? ???????? ???? ???? ?? ???? ??? ??????? ??? ?? ???? ????? ???? ?? ?? ????? ?? ???????? ???? ???? Microsoft Project Server ???????? ?? Microsoft Project ???? ???????? ???? ????? ??? ?? ?? ??? ????? ?? ???????? ???? ?????

?????

?? ???? ????? ???? ?? ?? Microsoft Project Server ?? Microsoft Project ???? ??? ??? ???????? ?? Microsoft ??????? ?????????? ???????? (IIS) ??????? ????? ?? URLScan ??????? ????? ?? ???????? ???? ????? This article contains information about how to configure the IIS Lockdown Tool or the URLSCAN Security Tool so that features of Microsoft Project Server and Microsoft Project Central are not disabled when you use the tools to configure the Web server.

If the IISLockdown Tool or the URLScan security tool is not configured correctly on the server, you may experience issues when you try to connect to Microsoft Project Server or to Microsoft Project Central. For example, when you try to connect to Microsoft Office Project Server 2003 after the URLScan Security tool is installed on the server, you may receive the following error message:
The page cannot be displayed

HTTP 404 ? File not found
Internet Explorer


??????????The IIS Lockdown Tool can significantly affect how your Web server and Web sites work. Before you deploy the IIS Lockdown Tool in a production environment, make sure that you test your configuration in a secure test environment.

???? ???????

Configure the IIS Lockdown Tool for Microsoft Project Server and for Microsoft Project Central

You can use the IIS Lockdown Tool to create and apply security templates that restrict access to IIS. Use the IIS Lockdown Tool on a computer that is running IIS 5.0 or IIS 4.0. You cannot use the IIS Lockdown Tool on a computer that is running IIS 6.0.

For more information about how to obtain the IIS Lockdown Tool, click the following article number to view the article in the Microsoft Knowledge Base:
325864How to install and use the IIS Lockdown Wizard

Use the IIS Lockdown Tool to help secure IIS on a computer that is running Microsoft Project Central

To use the IIS Lockdown Tool to help secure IIS on a computer that is running Microsoft Project Central. ??? ???? ?? ???, ????? ????? ?? ???? ????::
  1. ???-????? ????IISlockd.exefile to start the IIS Lockdown Tool.
  2. ????? ????,nexton the Welcome to Internet Information Services Lockdown Wizard page.
  3. Read the End User License Agreement (EULA), and if you agree, click??? ???? ????? ????-????? ????, ?? ???? ???next.
  4. On the Select Server Template page, clickDynamic Web server (ASP enabled), ?? ??? ???? ?? ??? ????? ????View template settings???????? ?? ????? ?? ??? ????? ????, ?? ???? ???next.
  5. ????? ????Internet Servicespage, verify that theWeb service (HTTP)??? ????? ????? ??, ?? ???? ??? ????? ????next.
  6. On the Script Maps page, verify that theActive Server Pages (.asp)check box is cleared, click to select theInternet Printing (.printer)???????? ?? ????? ?? ??? ????? ????, ?? ???? ???next.
  7. On the Additional Security page, click to clear theMSADC???????? ?? ????? ?? ??? ????? ????, ?? ???? ???next.
  8. On the URLScan page, verify that theInstall URLScan filter on the server??? ????? ????? ??, ?? ???? ??? ????? ????next.
  9. ?????Ready to Apply Settingsdialog box, review the settings that are displayed underSelected Changes?? ????-????? ????, ?? ???? ???next.

    The changes that you specify are applied.
  10. On the Applying Security Settings page, clickView Reportif you want to view or save the report, and then clicknext.
  11. ????? ????,??????.

Use the IIS Lockdown Tool to help secure IIS on a computer that is running Microsoft Project Server 2002

To use the IIS Lockdown Tool to help secure IIS on a computer that is running Microsoft Project Server 2002, configure the IIS Lockdown Tool. ??? ???? ?? ???, ????? ????? ?? ???? ????::
  1. ???-????? ????IISlockd.exeto start the IIS Lockdown Tool.
  2. ????? ????,nexton the Welcome to Internet Information Services Lockdown Wizard page.
  3. Read the End User License Agreement (EULA), and if you agree, click??? ???? ????? ????-????? ????, ?? ???? ???next.
  4. On the Select Server Template page, clickDynamic Web server (ASP enabled), ?? ???? ??? ?? ??? ???? ?? ??? ????? ????View template settings??? ?????.
  5. On the Internet Services page, verify that theWeb service (HTTP)check box and that theE-mail service (SMTP)check box are selected, and then clicknext.
  6. ????? ????Script Mapspage, verify that theActive Server Pages (.asp)??? ????? ??Index Server Web Interface (.idq, .htw, .ida)check boxes are cleared, click to select theInternet Printing (.printer)???????? ?? ????? ?? ??? ????? ????, ?? ???? ???next.
  7. ????? ????Additional Securitypage, click to clear theMSADC??? ????? ??Writing to content directories???????? ?? ????? ?? ??? ????? ????, ?? ???? ???next.
  8. ????? ????URLScanpage, verify that theInstall URLScan filter on the servercheck box is selected, and then clicknext.
  9. ????? ????Ready to Apply Settingspage, review the settings that are displayed underSelected Changes?? ????-????? ????, ?? ???? ???next.

    The IIS Lockdown Tool applies the changes that you specify.
  10. ????? ????Applying Security Settingspage, click????? ???????if you want to view or save the report, and then clicknext.
  11. ????? ????,??????.

Use the IIS Lockdown Tool to help secure IIS on a computer that is running Project Server 2003

To use the IIS Lockdown Tool to help secure IIS on a Microsoft Windows 2000 Server-based computer that is running Microsoft Office Project Server 2003, configure the IIS Lockdown Tool. ??? ???? ?? ???, ????? ????? ?? ???? ????::
  1. ???-????? ????IISlockd.exeto start the IIS Lockdown Tool.
  2. ????? ????,nexton the Welcome to Internet Information Services Lockdown Wizard page.
  3. Read the End User License Agreement (EULA). If you agree, click??? ???? ????? ????-????? ????, ?? ???? ???next.
  4. On the Select Server Template page, clickDynamic Web server (ASP enabled), ?? ???? ??? ?? ??? ???? ?? ??? ????? ????View template settings??? ?????.
  5. On the Internet Services page, verify that theWeb service (HTTP)check box and that theE-mail service (SMTP)check box are selected. ???? ???, ????? ????next.
  6. On the Script Maps page, verify that theActive Server Pages (.asp)??? ????? ??Index Server Web Interface (.idq, .htw, .ida)check boxes are cleared. Click to select theInternet printing (.printer)???????? ?? ????? ?? ??? ????? ????, ?? ???? ???next.
  7. On the Additional Security page, click to clear theMSADC??? ????? ??Writing to content directories??? ?????. ???? ???, ????? ????next.
  8. On the URLScan page, verify that theInstall URLScan filter on the server??? ????? ????? ??, ?? ???? ??? ????? ????next.
  9. On the Ready to Apply Settings page, review the settings that are displayed underSelected changes?? ????-????? ????, ?? ???? ???next.

    The IIS Lockdown Tool applies the changes that you specify.
  10. On the Applying Security Settings page, clickView Reportif you want to view or save the report, and then clicknext.
You are no longer required to enable theASPEnableParentPathsattribute in Project Server 2003. To enhance the security for the Microsoft Project Central virtual directory, disable theEnable parent pathsoption for the Microsoft Project Central virtual directory. ??? ???? ?? ???, ????? ????? ?? ???? ????::
  1. Locate the Microsoft Project Central folder in the Microsoft Internet Information Services (IIS) Management Console.
  2. ????-????? ????Microsoft Project Central???????, ?? ???? ??????.
  3. ????? ????????????????? ??,configuration????? ????, ?? ???? ???????????? ????????? ?? ????? ????..
  4. ???? ???? ?? ??? ????? ????Enable parent paths??? ?????.

Configure the URLScan.ini file for on a computer that is running Microsoft Project Server 2002 or Microsoft Project Central

Administrators can use the URLScan security tool to help secure their Web servers. The URLScan security tool is an Internet Server API (ISAPI) filter that is installed in IIS and screens all incoming requests to the server. The URLScan security tool filters these requests based on rules that the administrator sets in the URLScan.ini file.

???:We recommend that only experienced Web server administrators use this tool. You can configure the filters in a way that can interfere with typical Web site operation.

For more information about how to obtain and use URLScan security tool, click the following article number to view the article in the Microsoft Knowledge Base:
307608Using URLScan on IIS
To prevent the risk of restricting access to the Microsoft Project Server Web site or to the Microsoft Project Central Web site, configure URLScan.ini file. ??? ???? ?? ???::
  1. Configure the URLScan ISAPI filter to allow for dots (".") URL ??? ??? ???? ?? ???::
    1. Start Notepad, and then open the URLScan.ini file. The URLScan.ini file is located in the following folder:
      Drive:\%windir%\System32\Inetsrv\Urlscan\URLScan.ini
    2. ????? ?????????????? ??,??????.
    3. ????????? ???????????? ???,AllowDotInPath?? ????-????? ????, ?? ???? ??????? ??????.
    4. Locate the following line:
      AllowDotInPath=0
    5. Modify the line so that it reads as follows:
      AllowDotInPath=1
    6. ????? ???????????? ??,??????, ?? ???? ??? Notepad ?? ???? ???????
  2. IIS ???????? ????? ??? ???? ?? ??? ????? ???????????????? ????,???????????:iisreset??????????????? ???, ?? ???? ???OK.

Configure the URLScan security tool on a computer that is running Project Server 2003

  1. Configure the URLScan ISAPI filter to allow for dots (".") URL ??? ??? ???? ?? ???::
    1. Start Notepad, and then open the URLScan.ini file. The URLScan.ini file is located in the following folder:
      Drive:\%windir%\System32\Inetsrv\Urlscan\URLScan.ini
    2. ????? ?????????????? ??,??????.
    3. ????????? ???????????? ???,AllowDotInPath?? ????-????? ????, ?? ???? ??????? ??????.
    4. ????? ?????? ?? ?????:
      AllowDotInPath = 0
    5. ?????? ???? ??? ???? ??????????? ???????:
      AllowDotInPath = 1
    6. ????? ???????????? ??,??????.
  2. URLScan ISAPI ?????? ASP ?? ????? ???? ?? ??? ???????? ??????? ??? ???? ?? ???::
    1. ????? ??????????Notepad ???, ' ???? ????? ??????????.
    2. ????????? ???????????? ???,ASP ?????? ?? ???????? ?????? ????-????? ????, ?? ???? ??????? ??????.
    3. ????????? ?? ??????? ????? ???? ?? ?? ???? ???ASP ?????? ?? ???????? ????. ?????? ?????, ?? ???? ???. asp ????????? ?? ??????
    4. ????? ???????????? ??,??????, ?? ???? ??? Notepad ?? ???? ???????
  3. IIS ???????? ????? ??? ???? ?? ??? ????? ???????????????? ????,???????????:iisreset??????????????? ???, ?? ???? ???OK.
IIS ??????? ????? ?? ???? ??? ???? ??????? ?? ??? Microsoft ???????? ??? ???? ????? ?? ??? ????? ???? ?????? ?? ????? ????:
325864IIS ??????? ??????? ?? ????? ???? ?? ??????? ???? ?? ??? ???? ????
URLScan ??????? ????? ?? ???? ??? ???? ??????? ?? ??? ????? Microsoft ??? ???? ?? ????:
HTTP://TechNet.Microsoft.com/en-us/Security/cc242650.aspx

???

???? ID: 316398 - ????? ???????: 18 ??????? 2011 - ??????: 3.0
???? ???? ???? ??:
  • Microsoft Office Project Server 2003
  • Microsoft Project Server 2002
  • Microsoft Project 2000 Standard Edition
??????: 
kbhowto kbconfig kbinfo kbmt KB316398 KbMthi
???? ?????? ????????
??????????: ?? ???? ?? ???? ??????? ?? ????? ?? Microsoft ????-?????? ?????????? ?????? ?????? ???? ??? ??. Microsoft ???? ??? ????-???????? ?? ????-???????? ????? ?????? ?? ???? ???????? ???? ?? ???? ????? ????? ??? ?? ??? ?????? ?? ???? ???? ???? ??? ????? ??. ???????, ????-???????? ???? ????? ???? ???? ???? ???. ?????, ????????, ?????-???? ?? ??????? ?? ???????? ?? ???? ???, ???? ?? ??? ?????? ???? ???? ??? ????? ??? ?? ???? ??. Microsoft ??????? ??? ???? ?? ?????? ?? ??????????, ????????? ?? ??? ?????? ?? ???? ????? ?? ???? ???????? ?? ??? ???? ????? ?? ??? ????????? ???? ??. Microsoft ????-?????? ?????????? ?? ????? ?????? ?? ?? ??? ??.
?????????? ?? ??????? ????????? ??????? ??:316398

??????????? ???

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com