Re: IIS authentication - UPDATE

From: Blake (blake_duffey_at_NOSPAM.hotmail.com)
Date: 02/26/04


Date: Thu, 26 Feb 2004 10:00:40 -0500

I disabled my test ID and let it sit a while. Now when I try to log on I
get this:
"The server was unable to logon the Windows NT account 'testbb' due to the
following error: Logon failure: account currently disabled."
This is what I want. Still would like some guidelines, if anyone has them.
Blake

"Blake" <blake_duffey@NOSPAM.hotmail.com> wrote in message
news:ONbaQiH$DHA.2316@tk2msftngp13.phx.gbl...
> OK - I have IIS 5 on a member server. The files are set at the NTFS level
> to 'authenticated users' (RX) and the IIS folder is set to 'basic
> authentication' ONLY. I have SSL required for this folder. I am trying
to
> allow only valid AD users to visit this page:
>
> 1) can a user whose account is DISABLED view this page? I thought no, but
> today it seems to work
> 2) in the past an account that was marked 'user must change password at
next
> logon' could NOT access this page, but now that seems to work too
> 3) if an account has it's password expire, can that account visit my web
> page?
>
> Does anyone have any references on the connection between AD IDs and IIS
> authentication?
>
> Thanks, as always
> Blake
>
>



Relevant Pages

  • Re: Kerberos machine authentication - apparent authentication fail
    ... > until logon), the wireless connection can kick off when it is ready. ... > was confirmed in the server event logs with IAS (i set that up as the radius ... > as an ordinary user kicks in and takes over from the machine authentication. ... > while the network sorts itself out and a double click on a network link of ...
    (microsoft.public.windows.server.security)
  • Re: Please help refresh my memory on AD DC
    ... When I boot my Laptop I reach the Logon screeen for XP Laptop and here I am ... administrator account. ... account to be able to Login so I can control it from the DC. ... A Server has websites already hosted on it in a Workgroup and now I join it ...
    (microsoft.public.windows.server.active_directory)
  • Re: Please help refresh my memory on AD DC
    ... "Meinolf Weber" wrote: ... They however cannot logon directly to the physical DC machine. ... NOT an admin account to be able to Login so I can control it from ... A Server has websites already hosted on it in a Workgroup and now ...
    (microsoft.public.windows.server.active_directory)
  • Re: Please help refresh my memory on AD DC
    ... they just get the result of that what the domain administrator ... They however cannot logon directly to the physical DC machine. ... administrator account. ... A Server has websites already hosted on it in a Workgroup and now I ...
    (microsoft.public.windows.server.active_directory)
  • Re: Please help refresh my memory on AD DC
    ... The users will not see anything of that basically, they just get the result of that what the domain administrator or equivalent configures there. ... They however cannot logon directly to the physical DC machine. ... administrator account. ... A Server has websites already hosted on it in a Workgroup and now I ...
    (microsoft.public.windows.server.active_directory)