Re: Help With Security Please

From: Paul Gielens (pgielens_at_gmail.com.nospam)
Date: 11/27/05 

Date: Sun, 27 Nov 2005 18:32:48 +0100

 
Windows authentication suit your needs. Windows authentication uses the
security features integrated in your operating system/corporate network user
names, passwords andpermissions to authenticate and authorize web
application users.

<autorisation>
  <deny users="?">
<autorisation>

Best regards,
Paul Gielens

Visit my blog @ http://weblogs.asp.net/pgielens/
###

<kirby.matt@gmail.com> wrote in message
news:1133109552.359040.152110@g14g2000cwa.googlegroups.com...
> Hello, I am in the design stages of an ASP.NET application for my
> company, and I am wondering how I shoudl handle security. Even though
> this application is going to be internal and only 2-3 users, who will
> rarely change, they still insist on making it a web application. My
> first inclination is to use the Web.config and use Authorization to
> authorize the 3 users and deny everyone else. A couple of other apps
> here connect to Active Directory and authenticate the users that way,
> but I feel like that would be overkill and one more connection to
> maintain. There is also the possibilty of having a SQL table. There
> will be no login page, so any kind of authentication will be based on
> the users Windows user id. Any thoughts? Thanks.
>
>

Relevant Pages

  • Windows Authentication
    ... Is there a way to use a web form as a means to authorize a user through ... http://www.mysite.com/secure (secured by basic authentication) ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Access denied ( From one site to another, that is in another server)
    ... If insted of configure the ASP.NET Application for Windows Authentication, ... Active Directory - Delegation: ... To verify that the application account can act ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Access denied ( From one site to another, that is in another server)
    ... | configure it for Basic Authentication, can I avoid use Kerberos and use ... |> Enable Integrated Windows Authentication check box is ... Active Directory - Delegation: ... To verify that the application account can act ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Using IIS w/ASP .NET 2.0 Web Application Projects
    ... I've tried to explain to you the authentication mechanism as well as I can. ... When you're done, you'll see that, if you turn on Windows Authentication. ... I also know that the IIS documentation directly contradicts what you are saying. ... Integrated Windows Authentication overrides the Anonymous authentication default. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Debugging fails on Vista for Localhost
    ... When I go into Help from within IIS Manager on my Vista machine it points me to a technet article regarding Windows Authentication on IIS 7. ...
    (microsoft.public.dotnet.framework.aspnet)