IIS Server Security - How to Combine Anonymous IUSR and Integrated Windows on one site

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > August 2006 > How to Combine Anonymous IUSR and Integrated Windows on one site





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author How to Combine Anonymous IUSR and Integrated Windows on one site
tyrus

2006-08-30, 1:22 am

I have an Intranet site served from IIS6 which I need to allow anonymous
access to because it gets used by Blackberries. I get header infor from the
blackberries to identify those users, But I would also like to be able to use
HttpContext.Current.User.Identity.Name to identify a PC based user on our
network. This doesn't work unless I disable anonymous.

Does anyone know if this is possible to combine the two. Or a way to make it
work.

Thanks in Advance
Miha Pihler [MVP]

2006-08-30, 1:22 am

Hi,

You can't do this with one site. Anonymous is used first before any other
authentication option. When browser (or client) tries to access the website
it will always try anonymous first. If it succeeds then it will load the
page and no authentication options are enforced (if NTFS permissions are set
correctly).
If the IIS website is has disabled Anonymous access it will return Access
Denied to the client and ask it to authenticate with most secure option
first (e.g. Integrated and then Basic if selected).

--
Mike
Microsoft MVP - Windows Security

"tyrus" <tyrus@discussions.microsoft.com> wrote in message
news:AA592DF8-D48B-46DB-BD5C-BF5FB8E83997@microsoft.com...
>I have an Intranet site served from IIS6 which I need to allow anonymous
> access to because it gets used by Blackberries. I get header infor from
> the
> blackberries to identify those users, But I would also like to be able to
> use
> HttpContext.Current.User.Identity.Name to identify a PC based user on our
> network. This doesn't work unless I disable anonymous.
>
> Does anyone know if this is possible to combine the two. Or a way to make
> it
> work.
>
> Thanks in Advance



Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com