Re: IIS Security using Integrated Windows Authentication

From: Deus, Attonbitus (Thor@HammerofGod.com)
Date: 02/03/03

  • Next message: Brian W. Spolarich: "RE: IIS Security using Integrated Windows Authentication" 
    Date: Mon, 03 Feb 2003 08:39:18 -0800
To: Ghost <pplanetmars@yahoo.com>, focus-ms@securityfocus.com
From: "Deus, Attonbitus" <Thor@HammerofGod.com>

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    At 04:28 AM 2/3/2003, Ghost wrote:
    >Hello All,
    >
    >I have a site hosted on IIS that I want to use
    >Integrated Windows Authentication to authenticate
    >users before they can access the site. But I do not
    >want everyone that has valid logon credentials to be
    >able to access the site. Only a few users. How can I
    >achieve this?
    >
    >Thank you.

    Use NTFS permissions on the directory structure and group membership to
    limit what users have perms for the site. In other words, only give a
    particular group permissions, and make the people you want to have access
    members of that group.

    hth

    T
    -----BEGIN PGP SIGNATURE-----
    Version: PGP 7.1

    iQA/AwUBPj6bNohsmyD15h5gEQLqagCcCBBcWysXgeMLHBoq/tAL6Fnn2V8An2MX
    o+5urtugJUWz/4uMYhx9gioA
    =VYwM
    -----END PGP SIGNATURE-----

    Relevant Pages

    • RE: Disabling logon box to site
      ... When you have a Intranet site with "Integrated Windows Authentication" turned on, all user who are logged in to the domain will have access the intranet site. ... # Configure IIS Web Site to have "Integrated windows Authentication" ... # Configure the NTFS permissions for the folders which contain the web contant, ...
      (microsoft.public.inetserver.iis.security)
    • 403.1 and Integrated Windows Authentication
      ... First of all let me thank Jerry III for correctly identifying why IIS 6.0 ... was rejecting my attempts to use Integrated Windows Authentication. ... I created a registry file which modifies the ... their settings for them. ...
      (microsoft.public.inetserver.iis.security)
    • RE: IIS Integrated Windows Authentication problem
      ... to "Show friendly HTTP error messages." ... Make sure that all the accounts have the "Access this computer from the ... > - After extensive searching in the IIS logs, ... >>to Integrated Windows Authentication only. ...
      (microsoft.public.inetserver.iis.security)
    • Re: IIS logs for Exchange/OMA Access
      ... I restarted IIS and have requested the users to tell me if they have issues. ... Enabled Integrated Windows authentication ... Uncheck Enable anonymous access ... This newsgroup only focuses on SBS technical issues. ...
      (microsoft.public.windows.server.sbs)
    • RE: w2k w/ sp3 IIS
      ... Hi Kevin, ... It sounds like what might be happening is Anonymous is failing so IIS is ... defaulting to either Basic or Integrated Windows authentication. ... | Content-Class: urn:content-classes:message ...
      (microsoft.public.inetserver.iis.security)