How to restrict access to Web directory to ONLY 1 user or group?

From: JP (eyenok@hotmail.com)
Date: 12/17/02 

From: "JP" <eyenok@hotmail.com>
Date: Tue, 17 Dec 2002 16:54:42 -0500

This should be a no-brainer but I can't find anything clear on this
matter...

I want to restrict certain parts of a Web site (like an admin section) using
Integrated Windows Authentication (IWS). So I setup IIS5 to not allow
anonymous access in the desired directory and use IWS instead. Then I setup
a new user/group for that specific Web site for administration purposes.
Then for that restricted directory, in NTFS, I remove Web user access and
add the new user/group i've just created. I also leave Administrator and
SYSTEM with full access.

This is my problem : when I repeat all these steps for a second site, both
user/groups can access both restricted sections, as long as they provide a
valid user and password combination, although I specify different a
user/group in NTFS for each. Obviously, I don't want this!

So how can you set up private directories so that no other user/groups than
those specified in NTFS can't login and view the private Web content.

Thanks you for your input!

Relevant Pages

  • Re: How to restrict access to Web directory to ONLY 1 user or group?
    ... >>I want to restrict certain parts of a Web site (like an ... >>add the new user/group i've just created. ... >>user/group in NTFS for each. ...
    (microsoft.public.inetserver.iis.security)
  • How to restrict access to Web directory to ONLY 1 user or group?
    ... >I want to restrict certain parts of a Web site (like an ... >add the new user/group i've just created. ... >user/group in NTFS for each. ...
    (microsoft.public.inetserver.iis.security)
  • Case closed
    ... This is a ColdFusion MX related problem. ... > a new user/group for that specific Web site for administration purposes. ... > user/group in NTFS for each. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Restricted Access
    ... trying to restrict is linked to 'administrator' at the ... Web Site to the Zone', and OK, OK ... FrontPage] ...
    (microsoft.public.frontpage.client)
  • Restrict Access to computers
    ... I am trying to create a group policy to restrict a specific user/group to a single machine in the Domain, i can Deny access easily, but am not able to override it with the Allow option - Deny supersedes Allow, i am also unable to block inheritance of policies. ...
    (microsoft.public.windows.group_policy)