RE: Limiting users on secific machines that are part of a domain

• Previous message: Alfred Huger: "Voting on issues for this list and SecurityFocus (Focus-MS)"
• Maybe in reply to: Joshua Nichols: "Limiting users on secific machines that are part of a domain"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Tue, 9 Sep 2003 08:37:45 -0700
To: "Joshua Nichols" <jnichols@stimson.org>, <focus-ms@securityfocus.com>

I'd take advantage of NTFS permissions to do this. Create a group of
allowed users and lock down your web pages using this object.

-----Original Message-----
From: Joshua Nichols [mailto:jnichols@stimson.org]
Sent: Monday, September 08, 2003 9:37 AM
To: focus-ms@securityfocus.com
Subject: Limiting users on secific machines that are part of a domain

We have IIS 5 running on a server that is a member of a domain. We now
are required to limit access to the websites running on this machine
further than by domain.

That is, we have certain users in this domain that must be denied access
when attempting to authenticate to the webserver which previously
allowed all members of the domain to log in.

Is there any way to limit a user's access to this webserver without
disturbing their domain-level access rights?

Thanks,

--joshua.

------------------------------------------------------------------------

---
KaVaDo provides the first and only integrated Web application scanner
and 
firewall security suite that prevent Web applications attacks, the most 
common form of online exploitation. Download a FREE whitepaper on
Security Policy Automation for Web Applications. 
http://www.securityfocus.com/sponsor/KaVaDo_focus-ms_030818 
------------------------------------------------------------------------
---
---------------------------------------------------------------------------
KaVaDo provides the first and only integrated Web application scanner and 
firewall security suite that prevent Web applications attacks, the most 
common form of online exploitation. Download a FREE whitepaper on Security Policy Automation for Web Applications. 
http://www.securityfocus.com/sponsor/KaVaDo_focus-ms_030818 
---------------------------------------------------------------------------

• Previous message: Alfred Huger: "Voting on issues for this list and SecurityFocus (Focus-MS)"
• Maybe in reply to: Joshua Nichols: "Limiting users on secific machines that are part of a domain"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]