RE: Login for only one User Account in Entire Domain

From: David Dietz [MS] (ddietz_at_online.microsoft.com)
Date: 09/09/03


Date: Tue, 09 Sep 2003 13:23:40 GMT


Tapan,

The easiest way to do this is to use authentication for the site and use
NTFS permissions to restrict who has access to the content. If you set the
permissions on all of the content for the site to only allow SYSTEM,
IWAM_<machinename>, IUSR_<machinename> and the specific user to read the
content followed by turning off Anonymous access and using one of the other
authentication methods (probably Windows Integrated in this case).

Once these configuration changes have been made only the accounts listed as
having access will be able to access the content of the site. Any other
accounts will eventually receive a 401 Access Denied message when
attempting to browse to the site.

David Dietz -- IIS Support Professional
Search our online Knowledge Base
http://support.microsoft.com/support/

This posting is provided “AS IS” with no warranties, and confers no rights.
You assume all risk for your use. © 2001 Microsoft Corporation. All rights
reserved

--------------------
|>Content-Class: urn:content-classes:message
|>From: "Tapan Maniar" <tapan_maniar@hotmail.com>
|>Sender: "Tapan Maniar" <tapan_maniar@hotmail.com>
|>Subject: Login for only one User Account in Entire Domain
|>Date: Sat, 8 Feb 2003 02:24:37 -0800
|>Lines: 11
|>Message-ID: <06a601c2cf5c$487197a0$a101280a@phx.gbl>
|>MIME-Version: 1.0
|>Content-Type: text/plain;
|> charset="iso-8859-1"
|>Content-Transfer-Encoding: 7bit
|>X-Newsreader: Microsoft CDO for Windows 2000
|>X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
|>Thread-Index: AcLPXEhvZf9qc3w/SkCYcKJlIoYMMQ==
|>Newsgroups: microsoft.public.inetserver.iis.security
|>Path: cpmsftngxa06
|>Xref: cpmsftngxa06 microsoft.public.inetserver.iis.security:15125
|>NNTP-Posting-Host: TK2MSFTNGXA09 10.40.1.161
|>X-Tomcat-NG: microsoft.public.inetserver.iis.security
|>
|>I am having a local intranet web site which I want to give
|>access to only one person in the domain to be accessed
|>from internet.
|>My question is that how do I make one site restricted to
|>one particular User Account created in a domain? I do not
|>want even the administrator group to be able to access
|>that site, but only one single account. How to make that
|>happen?
|>
|>Thank You,
|>Tapan Maniar.
|>



Relevant Pages

  • Re: Administrator & restricted user
    ... OK let's start with NTFS permissions. ... Can I as the Administrator restrict what user Brown can ... a control panel of sorts that shows the privileges each account ... users applet in control panel to reset Brown's password, ...
    (microsoft.public.windowsxp.general)
  • Re: Basic Authentication fails with Error 401.2 where Integrated s
    ... Just as a check I used NET USER /ADD on my test account and as expected ... The password dialog is supposed to appear for Basic authentication ... Thinking more esoterically now -- what are the login rights assigned ... IIS uses a specific login type, ...
    (microsoft.public.inetserver.iis.security)
  • Re: Basic Authentication + IIS 5 + Windows 2000 + Frontpage 2002 = failure?
    ... Everytime I attempt to login under Basic Authentication, ... IUSR_blah account. ... the anonymous user impersonated by the IIS Server is the ... > Event Viewer Security log. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Basic Authentication fails with Error 401.2 where Integrated s
    ... here are the results of the MS Authentication & Access ... ACCOUNTNAME, this is the account that I am trying to grant access to: ... Account: COMPUTERNAME\ACCOUNTNAME Access type: FULL ... The current configuration requires IIS subauthentication. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Basic Authentication + IIS 5 + Windows 2000 + Frontpage 2002 = failure?
    ... have both anonymous and basic authentication checked, ... > browsing to this VDIR as the local administrator account via Basic-only ... > This posting is provided "AS IS" with no warranties, and confers no rights. ... I turned on Failure auditing for all ...
    (microsoft.public.inetserver.iis.security)