Windows Integrated Auth and NTFS security

From: Lorenzo (lorenzo.pena@senomyx.com)
Date: 03/10/03 

From: "Lorenzo" <lorenzo.pena@senomyx.com>
Date: Mon, 10 Mar 2003 08:53:42 -0800

Hi,

I am having a problem configuring security to subdirectories in an aspx
application, here is the scenario:

1. I have anonymous authentication disabled in IIS, only Integrated
authentication is enabled.
2. web.config: has <authentication mode="Windows" />, <allow users="*" />
3. NTFS security allows the group everyone read access.
4. Using IIS 5 running on Windows 2000 server.

My question is, can I use a new web.config file in a subdirectory to control
access without first having to set the subdirectory as an application?

I have also attempted to only use the one web.config file and then
restricting access via NTFS but that does not work either.

By the way the only way of setting security on the subdirectory is to add
<location> tags in the root web.config file, I would like to not do this
because I have a huge list of subdirectories I would like to secure.

Any help will be appreciated.

Relevant Pages

  • Re: Mac Server Hacked In Less Than 6 Hours
    ... Windows has RAS, and for it is built in since NT 3.1 ... | A typical IIS box and this Mac are not the same thing so the comparison ... IIS has been subject to quite a few bugs and so have ... Security isn't a proprietary attribute. ...
    (sci.crypt)
  • Re: DCOM calls fails - access denied
    ... That's exactly how I understood the ASP.NET security. ... But why does one configuration work but not the other? ... should get the token from IIS. ... If you set there a domain account, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: How to secure IIS?
    ... XP as well, because even if you don't install IIS, there are still a number ... If you think Windows 98 is secure, ... easy to attack, if there's no firewall... ... IIS security checklists] 3) install firewall and antivirus, ...
    (microsoft.public.inetserver.iis.security)
  • RE: .pdf security using ASP.NET security...
    ... I am wondering if using the aspnet_isapi.dll to handle PDF files security ... IIS has a list of Application Mappings which dictate whether a particular ... entries that tell aspnet_isapi.dll what to do with various file types. ... Files that do have app mappings require all the same steps, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: impact of mapping .??? to ASP.NET ISAPI???
    ... security issue, either from ASP.NET or IIS (this is something that my ISP ... > entries that tell aspnet_isapi.dll what to do with various file types. ... > process the request. ...
    (microsoft.public.dotnet.framework.aspnet.security)