RE: IIS & SQL, NT authentication for Web

From: Rita Nikas [MSFT] (ritan@online.microsoft.com)
Date: 01/18/03 

From: ritan@online.microsoft.com ("Rita Nikas [MSFT]")
Date: Sat, 18 Jan 2003 00:50:07 GMT

Hi Dan.

BTW - Thanks for including the URL with your question. That was a *big*
help.

Anyway, as your Internet users won't have Windows NT accounts on your
server, you do need to use other security, so you would need to allow
anonymous access, as far as IIS is concerned. Some additional resources
you'll want to review include:

Building and Configuring More Secure Web Sites
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/ht
ml/openhack.asp

Web Application Guide
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/iisref60/ht
m/aspg_aspg.asp

SQL Server Security Modes
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/vsentpro/ht
ml/veconsqlserversecuritymodes.asp

Sincerely,

Rita Nikas, MCSE MCDBA
Product Support Services
Microsoft Corporation
 
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Subject: IIS & SQL, NT authentication for Web
| Date: Fri, 17 Jan 2003 07:36:46 -0800
|
| Howdy,
|
| Am I correct in that, I should use NT Authentication for IIS to access SQL
| for a Web application on the Internet? Does the quote below apply to
Domain
| based Applications only or web applications as well? Any references would
| be appreciated!
|
| Thanks
| Dan Foxley
|
| Per:
| http://support.microsoft.com/default.aspx?scid=kb;en-us;247931
|
| Quote:
|
| Windows NT Authentication
| The computer running SQL Server enables access to its data through Windows
| NT accounts. To enable Windows NT authentication, through the Internet
| Information Server (IIS) computer, Basic authentication must be enabled
for
| the Web application. To do this, perform the following: ........
|
|
|

Relevant Pages

  • ISA Server Authentication issues in a mixed Windows/Macintosh environment
    ... I have a client - a local public school system - with a mixed ... and sometime switch over to a pure Windows environment by the time ... agree to allow them to have internet access. ... Basic authentication is the order of business, ...
    (NT-Bugtraq)
  • Re: Windows Authentication in asp.net 2005 to SQL Server?
    ... If the domains do not trust each other, Windows authentication is not going ... Basic authentication sometimes makes the need for Kerberos delegation go ... generic account to do the backend data stuff on our SQL Server. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Remote connection failed
    ... If you are going over a remote connection or are not logging ... into the domain where SQL Server is then no, Windows ... authentication won't work. ...
    (microsoft.public.sqlserver.connect)
  • Re: Changing passwords / Blocking SA login attempts
    ... I went into the Server Config properties and changed to Windows ... My login for Start and Run SQL server was in this format. ... I am supposing this was an SQL authentication, ...
    (microsoft.public.sqlserver.security)
  • Windows Authentication with IIS on separate machines
    ... Yes, setting Basic Authentication in IIS works, but the ... >in SQL server but doesn't work if user account was ... >imported from a Windows account. ...
    (microsoft.public.sqlserver.security)