Re: IIS Digest Authentication and Domain Password Changes

Hi,

IIS just uses the underlying Windows security infrastructure. So IIS will contact a local DC to authenticate the user. If the DC thinks that the password is incorrect, it will contact the PDCe FSMO role holder to check, before telling IIS that the password is, indeed, incorrect.

Cheers
Ken

"Joe Cormane" <nobody@xxxxxxxxxxx> wrote in message news:eIO9lRnaIHA.4712@xxxxxxxxxxxxxxxxxxxxxxx
I have a security scenario where people in remote offices change their passwords then attempt to connect to an IIS-hosted application at my site before the replication interval. I know that windows polls the PDC emulator to see if password changes have occurred, however, I wasn't sure if IIS does the same thing or if it could be configured to do so. Currently we are using Digest authentication. No realm is specified if that makes a difference.

I just want to ensure that the remote users don't end up locked-out in the event that they have changed passwords and get impatient. I also don't want to force a bunch of unnecessary replication just for an event that occurs once every 90 days.


.

Relevant Pages

  • Re: IIS Challenge for Password. WinXP authenticates differently th
    ... What IIS version. ... Integrated Authentication is going to require a domain. ... What if I want the users to authenticate as username and the domain is ... > When you have this configured, users just log onto their machines using ...
    (microsoft.public.inetserver.iis.security)
  • Re: Active Directory LDAP Authentication Fails in IIS 6
    ... in IIS 5.1) were: ... It seems you can't Authenticate using the Active Directory thats why you ... Public Function IsAuthenticated(ByVal domain As String, ... Dim entry As DirectoryEntry = New DirectoryEntry(_path, ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: ADSI Problem
    ... I suggest posting to IIS groups as well because if IIS will cause it to ... causing the script to stop working after it has been working. ... I have written a script to authenticate Active Directory users via ADSI ... Dim strUserName ...
    (microsoft.public.windows.server.active_directory)
  • Re: Authentication from a SAM base / IIS
    ... how are the ACLs in your web directory? ... which IIS version / which ASP.NET version? ... why FormsAuthentication API if you are doing Windows auth? ... authenticate against local or domain windows accounts. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: ADSI Problem
    ... Why not just let IIS authenticate the users? ... risks by joining the web server to the domain? ... Dim strUserName ...
    (microsoft.public.windows.server.active_directory)