IIS authentication

From: Blake (blake_duffey_at_NOSPAM.hotmail.com)
Date: 02/26/04 

Date: Thu, 26 Feb 2004 09:55:21 -0500

OK - I have IIS 5 on a member server. The files are set at the NTFS level
to 'authenticated users' (RX) and the IIS folder is set to 'basic
authentication' ONLY. I have SSL required for this folder. I am trying to
allow only valid AD users to visit this page:

1) can a user whose account is DISABLED view this page? I thought no, but
today it seems to work
2) in the past an account that was marked 'user must change password at next
logon' could NOT access this page, but now that seems to work too
3) if an account has it's password expire, can that account visit my web
page?

Does anyone have any references on the connection between AD IDs and IIS
authentication?

Thanks, as always
Blake

Relevant Pages

  • Re: Basic Authentication fails with Error 401.2 where Integrated s
    ... I didn't realise the Web Sites folder in IIS manager threw up a global ... sure that Basic Authentication is allowed to function on your server. ... ACCOUNTNAME, this is the account that I am trying to grant access to: ... Account: COMPUTERNAME\ACCOUNTNAME Access type: FULL ...
    (microsoft.public.inetserver.iis.security)
  • Re: Basic Authentication fails with Error 401.2 where Integrated s
    ... On the IIS directory security tab, anonymous access is disabled, digest ... authentication is disabled, integrated authentication is disabled and basic ... account created has full permissions for the folder and the file that's in it. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Basic Authentication fails with Error 401.2 where Integrated s
    ... Just as a check I used NET USER /ADD on my test account and as expected ... The password dialog is supposed to appear for Basic authentication ... Thinking more esoterically now -- what are the login rights assigned ... IIS uses a specific login type, ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS 5 Authentication problem- solved
    ... Tom Kaminski IIS MVP ... Can you log in using an administrator account, ... >> Subject: Re: IIS 5 Integrated Windows Authentication ... >> case there is no group, it is just the one server, ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS 6 fails anonymous connection
    ... It sounded like you configured sub-authentication, which on prior IIS ... The reason that you have to have Integrated authentication enabled along ... so there is some sort of configuration problem specific to ... The resources must also be ACL'd for this user account or else you will get ...
    (microsoft.public.inetserver.iis.security)