Showing posts with label Bitlocker. Show all posts
Showing posts with label Bitlocker. Show all posts

Tuesday 5 July 2022

HTTP Error 403.14 - Forbidden - The Web server is configured to not list the contents of this directory.

HTTP Error 403.14 - Forbidden

The Web server is configured to not list the contents of this directory.


Most likely causes:

  • A default document is not configured for the requested URL, and directory browsing is not enabled on the server

Things you can try:

  • If you do not want to enable directory browsing, ensure that a default document is configured and that the file exists.
  • Enable directory browsing using IIS Manager.
    1. Open IIS Manager.
    2. In the Features view, double-click Directory Browsing.
    3. On the Directory Browsing page, in the Actions pane, click Enable.
  • Verify that the configuration/system.webServer/directoryBrowse@enabled attribute is set to true in the site or application configuration file.

More Information:

This error occurs when a document is not specified in the URL, no default document is specified for the Web site or application, and directory listing is not enabled for the Web site or application. This setting may be disabled on purpose to secure the contents of the server.

View more information »


This problem occurs because the Web site does not have the Directory Browsing feature enabled, and the default document is not configured. To resolve this problem, use one of the following methods. To resolve this problem, I followed the steps in Method 1 as mentioned in the MS Support page and its the recommended method.


Method 1: Enable the Directory Browsing feature in IIS (Recommended)

  1. Start IIS Manager. To do this, click Start, click Run, type inetmgr.exe, and then click OK.

  2. In IIS Manager, expand server name, expand Web sites, and then click the website that you want to modify.

  3. In the Features view, double-click Directory Browsing.

  4. In the Actions pane, click Enable.

If that does not work for, you might be having different problem than just a Directory listing issue. So follow the below step,


Method 2: Add a default document

To resolve this problem, follow these steps:

  • Start IIS Manager. To do this, click Start, click Run, type inetmgr.exe, and then click OK.
  • In IIS Manager, expand server name, expand Web sites, and then click the website that you want to modify.
  • In the Features view, double-click Default Document.
  • In the Actions pane, click Enable.
  • In the File Name box, type the name of the default document, and then click OK.

Method 3: Enable the Directory Browsing feature in IIS Express

Note This method is for the web developers who experience the issue when they use IIS Express.

Follow these steps:

  • Open a command prompt, and then go to the IIS Express folder on your computer. For example, go to the following folder in a command prompt: C:\Program Files\IIS Express

  • Type the following command, and then press Enter:

    appcmd set config /section:system.webServer/directoryBrowse /enabled:true


There could be other reasons for the issue. Below are the another method on IIS 8.5 worth trying.


  1. Type "turn windows features on or off" in search.
  2. Click on "Add Roles and features" in Server Manager.
  3. In Wizard scroll down to the Web server and select : Web Server -> Application Development. Select all except CGI from the list as shown in the screen shot

enter image description here

  1. Finally hit next and Install.
  2. Restart IIS

Tuesday 28 June 2022

Register a Service Principle Name (SPN) for MBAM Web Application

When I am working to build MBAM infrastructure and during the MBAM web server setup I got below warnings/errors on MBAM web and setup event logs:

MBAM Event logs:
 
Log Name: Microsoft-Windows-MBAM-Setup/Admin
Task Category: WebProviderWarning
Event ID: 502
Keywords: Configurator,Cmdlet,WebApplication
Web application provider warning.
Description:
Cannot register the Service Principal Name (SPN) "HTTP/MBAMWEB.pj360i.co.uk" on the AppPool account "pj360i\MBAMAppPool". You may not have the required permissions to create the SPN. The SPN must be created for MBAM to function properly. Configure the SPN manually. http://go.microsoft.com/fwlink/?LinkId=390155
Could not set Service Principal Name (SPN) "HTTP/MBAMWEB.pj360i.co.uk". Error 0x21C7.
Could not set Service Principal Name (SPN) "HTTP/recoverykey.pj360i.co.uk". Error 0x2098.

Log Name: Microsoft-Windows-MBAM-Web/Admin
Task Category: WebAppSpnError
Event ID: 1
Keywords: Spn,WebApplication
Application: Microsoft BitLocker Administration and Monitoring/ServiceDesk is missing the following Service Principal Names (SPNs): http/HTTP/MBAMWEB.pj360i.co.uk
Application: Microsoft BitLocker Administration and Monitoring/SelfService is missing the following Service Principal Names (SPNs):
http/HTTP/MBAMWEB.pj360i.co.uk
Register the required SPNs on the account: MBAMAppPool.
For more information go to: http://go.microsoft.com/fwlink/?LinkId=526511

Register a Service Principle Name (SPN) for MBAM Web Application

When using the setspn command to add SPNs, the SPN must be specified correctly. The format of an HTTP SPN is http/host. The following is the command syntax for using the SetSPN tool to create an SPN for the service/server:

Syntax: Setspn -s http/<computer-name>.<domain-name> <domain-user-account>

Steps to register SPN:

1. Log in as domain administrator to the domain controller.
2. Launch the Command Prompt window.
3. Copy the following command, substituting placeholder values with actual data:
        Setspn -s http/<computer-name>.<domain-name> <domain-user-account>

    In my case: Setspn -s http/MBAMWEB.pj360i.co.uk pj360i\MBAMAppPool
4. Execute the command.

Tuesday 31 May 2022

Solved: Disable-MbamReport : The request failed with HTTP status 404: Not Found.

Resolution to below error when you attempt to Disable MBAM report using PowerShell or MBAM server setup:

CmdletError:
Disable-MbamReport : The request failed with HTTP status 404: Not Found.
At C:\Users\p1jebastin\Desktop\Remove-MbamFeatures-Reports.ps1:2 char:1
+ Disable-MbamReport -Force
+ ~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Disable-MbamReport], WebException
+ FullyQualifiedErrorId : System.Net.WebException,Microsoft.Mbam.Server.Commands.DisableMbamReportCommand

Please find the detailed Event log - Microsoft-Windows-MBAM-Setup/Admin:

Cmdlet error.

Description:
Exception(s) thrown from the feature provider:
System.AggregateException: One or more errors occurred. ---> System.Net.WebException: The request failed with HTTP status 404: Not Found.
at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
at Microsoft.Mbam.Setup.Common.Reports.ReportsManager.CreateParentFolder(ReportsManagerState state)
at Microsoft.Mbam.Setup.Common.Reports.ReportsManager.DeployReports(ReportsManagerState state, DataSourceDefinition definition)
at Microsoft.Mbam.Setup.Common.Reports.ReportsManager.RemoveReports()
at Microsoft.Mbam.Setup.Common.ActionItem.Run()
at Microsoft.Mbam.Setup.Common.ActionItemQueue.Run()
at Microsoft.Mbam.Setup.Common.Reports.ReportsFeatureProvider.Disable(IProgress`1 progress, CancellationToken cancellationToken, ReportsConfiguration configuration)
at Microsoft.Mbam.Setup.Common.FeatureProviderBase`1.<>c_DisplayClass34`1.<InvokeAsync>b33()
at System.Threading.Tasks.Task`1.InnerInvoke()
at System.Threading.Tasks.Task.Execute()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Mbam.Setup.Common.FeatureProviderBase`1.<InvokeAsync>d
36`1.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Mbam.Setup.Common.FeatureProviderBase`1.<DisableAsync>d
18.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Mbam.Setup.Common.FeatureProviderBase`1.<>c
DisplayClasse.<<DisableAsync>bd>d10.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Mbam.Setup.Common.FeatureProviderBase`1.<DisableAsync>d
14.MoveNext()
--- End of inner exception stack trace ---
at System.Threading.Tasks.Task.ThrowIfExceptional(Boolean includeTaskCanceledExceptions)
at System.Threading.Tasks.Task.Wait(Int32 millisecondsTimeout, CancellationToken cancellationToken)
at Microsoft.Mbam.Server.Commands.FeatureOperation`1.DisableFeature(T configuration)
---> (Inner Exception #0) System.Net.WebException: The request failed with HTTP status 404: Not Found.
at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
at Microsoft.Mbam.Setup.Common.Reports.ReportsManager.CreateParentFolder(ReportsManagerState state)
at Microsoft.Mbam.Setup.Common.Reports.ReportsManager.DeployReports(ReportsManagerState state, DataSourceDefinition definition)
at Microsoft.Mbam.Setup.Common.Reports.ReportsManager.RemoveReports()
at Microsoft.Mbam.Setup.Common.ActionItem.Run()
at Microsoft.Mbam.Setup.Common.ActionItemQueue.Run()
at Microsoft.Mbam.Setup.Common.Reports.ReportsFeatureProvider.Disable(IProgress`1 progress, CancellationToken cancellationToken, ReportsConfiguration configuration)
at Microsoft.Mbam.Setup.Common.FeatureProviderBase`1.<>c
DisplayClass34`1.<InvokeAsync>b33()
at System.Threading.Tasks.Task`1.InnerInvoke()
at System.Threading.Tasks.Task.Execute()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Mbam.Setup.Common.FeatureProviderBase`1.<InvokeAsync>d
36`1.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Mbam.Setup.Common.FeatureProviderBase`1.<DisableAsync>d
18.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Mbam.Setup.Common.FeatureProviderBase`1.<>c
DisplayClasse.<<DisableAsync>bd>d10.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Mbam.Setup.Common.FeatureProviderBase`1.<DisableAsync>d
_14.MoveNext()<---


Resolution:

  1. Open registry editor as administrator
  2. Goto Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MBAM Server\Enabled
  3. Right click Reports and choose Modify
  4. Modify the value from 1 to 0
  5. And re-run the MBAM setup to add Reports configuration again.

Let me know in comments if you have alternate way to resolve the error.

FREE Cybersecurity Certifications

Here's 15 FREE courses provided by the Qualys. The cybersecurity firm Qualys focuses on providing cloud-based security and compliance so...