restricting access in IIS6 with NTFS

From: GCF (GCF_at_discussions.microsoft.com)
Date: 08/22/05 

Date: Mon, 22 Aug 2005 06:50:17 -0700

Hi,

I am trying to restrict a simple html web page (no written security around
it) to a subset of the domain users. In IIS, I have de-selected the Anonymous
User and selected Win Integrated.

For folder permissions where the html page is located, I have an Admin group
and a User group. The User group contains NT Authority/Authenticated Users
(S-1-5-11), NT Authority/Interactive(S-1-5-4) and a list of users that will
be allowed access.

When I try to have someone not in the list of specific users, they can bring
up the page. Is this b/c of the NT Authority/Authenticated Users (S-1-5-11),
NT Authority/Interactive(S-1-5-4)? Does this allow all users on the domain to
access the page? And if so, can I remove them?

Thanks,
GCF

Relevant Pages

  • Re: Automatic update and security
    ... MS-MVP Windows Media Center\Windows Powered Smart Display\Security ... Per user Group Policy Restrictions for XP Home and XP Pro ... >I add Domain Users to the Power Users Group on the XP ... will Automatic updates still work? ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Problem with Group Policy on windows 2003 server sp1, please h
    ... Please give me a step by step source to configuring the group ... policy. ... I'm using the default user group "Domain Users" I don't know if I ...
    (microsoft.public.windows.server.active_directory)