Unable to download Excel Files after Running IIS Lockdown

We have a Windows 2000 Standard Server and implemented IIS lockdown,
including URLscan.

Since doing so it is not possible to download Excel documents from the
website.

When attempting to download the Excel file, the following error message is
received:

"Internet Explorer cannot download <filename>.xls from <website name"

"Internet Explorer was not able to open this Internet site. The requested
site is either unavailable or cannot be found. Please try again later."

The file is definitely on the server and we can open it on the server with
Excel.

If I rename the file to a different extension e.g. MyExcelfile.abc then it
will download OK.

This seems to indicate that URLScan is getting in the way, however, it does
not show a failed attempt to access the Excel document in the URLScan log
files.

We have added .xls to the allowed extensions in URLScan, but this hasn't
solved the problem.

Could anyone offer any advice on how to solve this issue, please?

TIA for your time and help.

Roland

Paul
Wed Jun 16 06:36:16 CDT 2004

On Wed, 16 Jun 2004 09:55:58 +0100, "Roland Corbet"
<Roland@cyber-media.co.uk> wrote:

>We have a Windows 2000 Standard Server and implemented IIS lockdown,
>including URLscan.
>
>Since doing so it is not possible to download Excel documents from the
>website.
>
>When attempting to download the Excel file, the following error message is
>received:
>
>"Internet Explorer cannot download <filename>.xls from <website name"
>
>"Internet Explorer was not able to open this Internet site. The requested
>site is either unavailable or cannot be found. Please try again later."
>
>The file is definitely on the server and we can open it on the server with
>Excel.
>
>If I rename the file to a different extension e.g. MyExcelfile.abc then it
>will download OK.
>
>This seems to indicate that URLScan is getting in the way, however, it does
>not show a failed attempt to access the Excel document in the URLScan log
>files.
>
>We have added .xls to the allowed extensions in URLScan, but this hasn't
>solved the problem.
>
>Could anyone offer any advice on how to solve this issue, please?
>
>TIA for your time and help.
>
>Roland

Roland,

Did you re-start the IIS services for the changes to take effect ?

Read this KB article for more information :

HOW TO: Configure the URLScan Tool
http://support.microsoft.com/?id=326444



Regards,

Paul Lynch
MCSE

Kristofer
Wed Jun 16 11:32:29 CDT 2004

Are you really sure you added the extension to the correct place? If so, did
you restart IIS, it is necessary after editing urlscan.ini

--
Regards,
Kristofer Gafvert - IIS MVP
http://www.ilopia.com - When you need help!


"Roland Corbet" <Roland@cyber-media.co.uk> wrote in message
news:uAc%23%23%233UEHA.3692@TK2MSFTNGP09.phx.gbl...
> We have a Windows 2000 Standard Server and implemented IIS lockdown,
> including URLscan.
>
> Since doing so it is not possible to download Excel documents from the
> website.
>
> When attempting to download the Excel file, the following error message is
> received:
>
> "Internet Explorer cannot download <filename>.xls from <website name"
>
> "Internet Explorer was not able to open this Internet site. The requested
> site is either unavailable or cannot be found. Please try again later."
>
> The file is definitely on the server and we can open it on the server with
> Excel.
>
> If I rename the file to a different extension e.g. MyExcelfile.abc then it
> will download OK.
>
> This seems to indicate that URLScan is getting in the way, however, it
does
> not show a failed attempt to access the Excel document in the URLScan log
> files.
>
> We have added .xls to the allowed extensions in URLScan, but this hasn't
> solved the problem.
>
> Could anyone offer any advice on how to solve this issue, please?
>
> TIA for your time and help.
>
> Roland
>
>
>