Re: Allowing only Authenticated Users to access the Web Page

From: Miha Pihler (mihap-news_at_atlantis.si)
Date: 09/20/04


Date: Mon, 20 Sep 2004 19:31:51 +0200

Hi Zack,

What you could do is enable Integrated Windows Authentication and disable
Anonymous Access. Next thing you need to do is edit NTFS permissions on
website content (best to do it on the folder that holds your web data
files). Create a group for the users that need access to this site. Give
this group appropriate permissions (e.g. read). You will also want to grant
less restrictive permissions to the administrator and webmaster. Now if you
set this right your contractors should not see this site (they will be
prompted for username and password, but should not be able to get to the
content of the website).

Note, that if your contractors are members of domain, you can't use Domain
Users, Authenticated Users or Everyone groups for restrictions. They fall
under security context of this groups.

I hope this helps,

Mike

"Zack Schneeberger" <schneebie1@hotmail.com> wrote in message
news:a2aa04c0.0409200818.75bab8b6@posting.google.com...
> I am the network administrator for a company of 50 employees and 10
> contractors. The 10 contractors have emails addresses and exist in our
> domain.
>
> I would like to be able to restrict the contractors from accessing a
> internal webpage. I would easily be able to do this be adding them to
> a group and denying the group. I also want the 50 employees to be able
> to see the webpage. What is the correct Authentication Method to do
> this? I obviously want for the server to contact the DC to see if the
> user is allowed to seee the page and if so allow the user to view the
> page.
>
> Thanks alot.
>
> Zack



Relevant Pages

  • Host headers and integrated windows authentication problems
    ... I've created a new website called Systems Team. ... when I restrict permissions on the folder that the website maps to it ... Authentication and Basic Authentication. ...
    (microsoft.public.inetserver.iis.security)
  • RE: default for requiring authentication 2003
    ... Windows 2000 and earlier would allow access as I described and I ... default for requiring authentication 2003 ... resources that have permissions for Everyone unless you enable this setting. ... same username and password as a user on the domain or on the local server. ...
    (Focus-Microsoft)
  • Re: Authentication from Active Directory and Database based user d
    ... with this (I'm not too clear on the permissions to see a page or actual ... You mentioned earlier in the thread that you've used formas authentication ... you don't need separate ... I'm writing a web system ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: pls Help!! After Trust, cannot access from local to foreign do
    ... authentication, they will use the source domain credentials to login. ... Which this is what i want to retain after trust. ... You need to define access by settings permissions on the objects in ... Microsoft MVP - Windows Server - Directory Services ...
    (microsoft.public.windows.server.active_directory)
  • RE: default for requiring authentication 2003
    ... It was a terrible design decision back in NT & Windows 2000, ... default for requiring authentication 2003 ... resources that have permissions for Everyone unless you enable this setting. ... same username and password as a user on the domain or on the local server. ...
    (Focus-Microsoft)