Re: group security in IIS



Hi Hank,

Did you disabled anonymous access on the virtual folder in question? You
should disable anonymous access and enable Integrated Windows
Authentication. Then, on the physical folder, set the NTFS permissions
required for the group. Wihout anonymous access, as soon someone request the
protected resource, IIS will respond with a 401, and your browser will take
care of authentication proccess. In case of IE it will try the current
credentials of the logged on user before prompting for username/password. To
make sure who is the user accessing the resource check the IIS log files.

Cheers,

Eric.

"HankC" <clarkc@xxxxxxxxxxxx> wrote in message
news:1154360168.759326.109300@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

I have a web app that I wish to limit execution access to a universal
security group during beta test...

I've tried restricting permissions using ntfs, the virtual directory
and the net.config file (which I assume will not work as this is not a
vb.net app).

So far, access is still universal. Any ideas?


HankC



.



Relevant Pages

  • RE: Save IE password thorugh group policy
    ... that web site, this remote cookie will pickup the password so that the users ... You can configure IIS to Anonymous access or Digest ... Configure Authentication in IIS ...
    (microsoft.public.windows.group_policy)
  • Re: User ASPNET in SQL Server 2000
    ... When you hit a web application that has anonymous access, ... While I love integrated security in SQL Server, it is often a pain in web ... maintenance of accounts with access. ... >>> authentication", and has the same users as in Win 2000 ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: My boss....
    ... Click the Edit button under Authentication and access control, ... properties, Web site tab, Advanced button) ... Exchange virtual directory, clear the anonymous access box, clear Integrated ...
    (microsoft.public.windows.server.dns)
  • Re: Implement AuthenticationButton for anonymous and integrated access
    ... You'll want to set your portal up for anonymous access. ... Windows Authentication is checked. ... they are part of the SharePoint domain. ... users will be prompted to log in to access these javascript files. ...
    (microsoft.public.sharepoint.portalserver.development)
  • Re: ISA 2004 report problem; IP addresses instead of user accounts
    ... Firewall Clients did not have anonymous access. ... , web proxy, authentication. ... The only way to tell is by reviewing traffic in the isa ...
    (microsoft.public.isa)

Quantcast