IIS Server Security - IIS authentication

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > February 2004 > IIS authentication





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author IIS authentication
Blake

2004-02-26, 10:34 am

OK - I have IIS 5 on a member server. The files are set at the NTFS level
to 'authenticated users' (RX) and the IIS folder is set to 'basic
authentication' ONLY. I have SSL required for this folder. I am trying to
allow only valid AD users to visit this page:

1) can a user whose account is DISABLED view this page? I thought no, but
today it seems to work
2) in the past an account that was marked 'user must change password at next
logon' could NOT access this page, but now that seems to work too
3) if an account has it's password expire, can that account visit my web
page?

Does anyone have any references on the connection between AD IDs and IIS
authentication?

Thanks, as always
Blake


Tom Kaminski [MVP]

2004-02-26, 10:34 am

"Blake" <blake_duffey@NOSPAM.hotmail.com> wrote in message
news:ONbaQiH$DHA.2316@tk2msftngp13.phx.gbl...
> OK - I have IIS 5 on a member server. The files are set at the NTFS level
> to 'authenticated users' (RX) and the IIS folder is set to 'basic
> authentication' ONLY. I have SSL required for this folder. I am trying

to
> allow only valid AD users to visit this page:
>
> 1) can a user whose account is DISABLED view this page? I thought no, but
> today it seems to work
> 2) in the past an account that was marked 'user must change password at

next
> logon' could NOT access this page, but now that seems to work too
> 3) if an account has it's password expire, can that account visit my web
> page?
>
> Does anyone have any references on the connection between AD IDs and IIS
> authentication?


This explains it ...
http://support.microsoft.com/defaul...6&Product=iis50

--
Tom Kaminski IIS MVP
http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS
http://mvp.support.microsoft.com/
http://www.microsoft.com/windowsser...ty/centers/iis/



Blake

2004-02-26, 11:34 am

Excellent! Thanks, Tom. Good info on this topic.

Blake

"Tom Kaminski [MVP]" <tomk (A@T) mvps (D.O.T) org> wrote in message
news:c1l1pb$arh8@kcweb01.netnews.att.com...
> "Blake" <blake_duffey@NOSPAM.hotmail.com> wrote in message
> news:ONbaQiH$DHA.2316@tk2msftngp13.phx.gbl...
level[color=darkred]
> to
but[color=darkred]
> next
>
> This explains it ...
>

http://support.microsoft.com/defaul...6&Product=iis50
>
> --
> Tom Kaminski IIS MVP
> http://www.iistoolshed.com/ - tools, scripts, and utilities for running

IIS
> http://mvp.support.microsoft.com/
> http://www.microsoft.com/windowsser...ty/centers/iis/
>
>
>



Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com