Re: IIS and domain security

From: Ken Schaefer (kenREMOVE_at_THISadOpenStatic.com)
Date: 06/22/05


Date: Wed, 22 Jun 2005 23:21:58 +1000

What do you mean by "internal domain users"? All your users are going to
need some kind of Windows credentials (i.e. a domain account).

If you mean that users on your internal network should not need to enter
their username/password, then ensure that the website is in their Internet
Explorer Intranet security zone. See this KB article for a full set of
requirements:
http://support.microsoft.com/?id=258063

If the internal users are accessing the site via a fully-qualified DNS name,
then you can use a Group Policy Object (GPO) to put that FQDN into their IE
intranet zone.

Cheers
Ken

-- 
IIS Blog: www.adopenstatic.com/cs/blogs/ken/
Web: www.adopenstatic.com
"Phil" <Phil@discussions.microsoft.com> wrote in message 
news:647D0F53-ECE5-4D05-BE41-D3739028308F@microsoft.com...
:I have a directory under my wwwroot folder that I would like accessible 
over
: the web where my internal domain users do NOT have to enter credentials. 
But
: any user not on our domain must enter credentials.  That way all my 
internal
: users do not have to enter a username/pwd everytime they access the site,
: but our customers and any external users MUST enter username/pwd.  I have
: tried both IIS security settings and NT security settings and a combo of 
both
: but I just cant get it work this way.  I appreciate any replies.  Thank 
you. 


Relevant Pages

  • Re: issues with Out of Office (Exchange Server 2007 SP1....Outlook 2007 SP1)
    ... I am prompted for credentials ... sitting on the EXCH2007 box itself results in an error (the http error ... anyone's mailbox [neither to the full mailbox nor to part of the mailbox ... Internet Explorer is not misconfigured and there ...
    (microsoft.public.exchange.admin)
  • Forcing authentication with a specific DC
    ... authenticates with the firewall through this site. ... is no direct internet access anywhere but in Site A. ... credentials are wrong and to enter new ones. ... but the Citrix server is still ...
    (microsoft.public.win2000.security)
  • RE: Login from Internet
    ... \par - You would like to know how to prevent a user not log on the site from Internet if he didn't input his domain credential. ... \par Microsoft Online Partner Support ... \par Subject: Login from Internet ... they get prompted for their credentials again. ...
    (microsoft.public.sharepoint.portalserver)
  • RE: Internet Explorer problem - please help
    ... You can go to Tools --> Internet Options and click on Security Tab. ... bypass most security settings while browsing to those sites on the list. ... This page may not display correctly. ... > So I do as it says and click on the information bar. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: A little help (kerberos, netbios, and SPN... oh my!)
    ... internet explorer see's the fqdn as a non trusted internet site and ... try adding the fqdn as a trusted site, ... should allow the credentials to be passed. ... this will result in a login prompt, the only problem is they must ...
    (microsoft.public.inetserver.iis.security)