Re: iis - authenticate thru domain username/password

From: Ken Schaefer (ken_at_adOpenStatic.com)
Date: 11/21/03

  • Next message: Avleen Vig: "Re: IIS traffic"
    To: <focus-ms@securityfocus.com>
    Date: Fri, 21 Nov 2003 16:17:18 +1100
    
    

    Disable "allow anonymous authentication" using the IIS MMC Snapin for the
    folder in question (it's on the Security tab). Enable Basic and/or
    Integrated Windows Authentication.

    Then, set the NTFS permissions for that folder as required.

    Cheers
    Ken

    ----- Original Message -----
    From: "Henry David Christopherson" <dng@cmhsweb.org>
    To: <focus-ms@securityfocus.com>
    Sent: Thursday, November 20, 2003 8:44 AM
    Subject: iis - authenticate thru domain username/password

    : I have an IIS server. Can I make a certain
    : folder only accessible if they login with their
    : domain username/password?
    :
    : Just like in apache, wherein you can have .htpasswd
    :
    : Whenever someone will access that web directory or
    : any directory under that, it will ask for username/password.
    :
    : Is this possible?
    :
    :
    : --------------------------------------------------------------------------
    -
    : --------------------------------------------------------------------------
    -
    :
    :

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------


  • Next message: Avleen Vig: "Re: IIS traffic"

    Relevant Pages

    • Re: Defining access rights on physical folder for publishing
      ... Since you are requiring Authentication, IIS uses the authenticated identity ... to execute requests on the server. ... I've setup a web publishing folder on a W2K machine with IIS 5. ...
      (microsoft.public.inetserver.iis.security)
    • Re: IIS / NTFS permissions
      ... I have double checked the NTFS settings and there's only ... I'm using IIS 5.0 on Windows 2000 Server. ... >> Further, if I enable anonymous authentication, IIS ... >> the folder. ...
      (microsoft.public.inetserver.iis.security)
    • Authentication Question
      ... IIS then properties of the folder and select Directory ... checked "Digest authentication for Domain servers". ... I have compared user groups and they are ...
      (microsoft.public.inetserver.iis.security)
    • Re: setting up a webshare
      ... >>I have a folder i'd like to make available across the internet. ... >> it connects fine and displays the user authentication dialog box. ... > (A web share is really an IIS virtual directory.) ...
      (microsoft.public.inetserver.iis)
    • Re: HELP PLEASE The request failed with HTTP status 401: Access Denied.
      ... Web Security: Part 2: Introducing the Web Application Manager, Client ... Authentication Options, and Process Isolation ... It introduces the Web Application Manager in IIS that ... logon session, which is dangerous. ...
      (microsoft.public.dotnet.framework.aspnet.security)