Re: Best practices

From: Michael Willers (michael.willers_at_nospam.de)
Date: 09/10/04 

Date: Fri, 10 Sep 2004 09:59:12 +0200

"opianeta" <opianetaDONOTSPAMPLEASE@yahoo.it> wrote in message
news:uvPrVVwlEHA.1904@TK2MSFTNGP09.phx.gbl...
> Hi,
> can I find somewhere any whitepaper about authentication and best practice
> about
> application logon ?
>
> We have many application , with IIS, COM+, Databases and so on.
>
> Some of them have integrated, some use impersonate .
>
> I'd like to find soe example of the best way..
>
>
Have a look at

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/ThreatCounter.asp

I know it is a lot to read but i think it is really helpfull.

Regards
Michael

Relevant Pages

  • Re: Best practices
    ... thankyousoimuch... ... >> can I find somewhere any whitepaper about authentication and best ...
    (microsoft.public.dotnet.security)
  • Re: Kerberos machine authentication - apparent authentication fail
    ... > until logon), the wireless connection can kick off when it is ready. ... > was confirmed in the server event logs with IAS (i set that up as the radius ... > as an ordinary user kicks in and takes over from the machine authentication. ... > while the network sorts itself out and a double click on a network link of ...
    (microsoft.public.windows.server.security)
  • Re: Kerberos machine authentication - apparent authentication fail
    ... as the case may be) which will delay authentication until ... I also have an Intel network adapter and WAP that does not have this> problem and even works well with 802.1X EAP-TLS for domain logon. ... In> most cases [ipsec a possible exception] kerberos authentication is not> needed to access domain resources as long as the client and server use a> common authentication method for lm/ntlm/ntlmv2. ... The main issue is to> NEVER include an ISP dns server in the preferred server list in the tcp/ip> properties or DHCP scope of any domain computer or any computer you want to> join to the domain in which case your computers may be trying to locate the> domain _srv records on the ISP dns server and fail. ...
    (microsoft.public.windows.server.security)
  • Re: Logon 529 Errors
    ... Authentication in SMTP virtual server. ... These are almost surely SMTP logon attempts, ... Caller User Name: DELLSERVER$ ...
    (microsoft.public.windows.server.sbs)
  • Re: Active Directory Logon to attribute
    ... have permission to access as you are denied to logon from this workstation... ... If accounts and machines are from abc.com they can logon to abc.com only. ... named xyz.org for the user authentication for internet. ...
    (microsoft.public.windows.server.active_directory)