I use the following :
Microsoft IIS can be set up to require SSL connections, thus disabling the use of the standard http protocol. To ensure that the web server only accepts https requests, then do the following:
• Open Internet Services Manager
• Right click Default Web Site, and select Properties
• Click the Directory Security tab
• In the Secure Communications section, click Edit
• Check the “Require Secure Channel (SSL)” box
• Click OK and OK
• Create a file in the root of the default website folder, usually c:\inetpub\
called SSLRedirect.asp with the following content :
<%
Data = request.servervariables("QUERY_STRING")
URL = replace(Data, "403;", "")
URL = replace(URL, ":80","")
URL = replace(URL, "
"
Response.Status="301 Moved Permanently"
Response.AddHeader "Location", URL
%>
• On the Properties dialog of the website, select Custom Error Messages.
• For the 403;4 error edit the properties and change it to a URL and set the location to /SSLRedirect.asp.
• On the Web Services Extensions section in IIS, ensure that Active Server Pages are Allowed.
Greg Griffiths
Livelink Certified Developer & ECM Global Star Champion 2005 & 2006