Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

To give our user's the ability to protect content on their IIS6 sites we used a tool called IISPassword which emulates .htaccess to provide Basic authentication.

There isn't support for IISPassword on IIS7 at the moment. Is there an equivalent mechanism I can use built into IIS7 instead?

I'm well aware of ASP.NET Forms Authentication, but I need a way for users deploying non-ASP.NET content (such as PHP, Perl, images etc) to be able to use Basic authentication but not have to write code to achieve this.

Is this possible?

share|improve this question

Hey Kev. Yes, with IIS7, system.webServer allows users to lock down sections and have it apply to all types of content. It's "similar" syntax to the ASP.NET system.web syntax. You can use IIS 7 Manager to change it, then look at the resultant web.config to get the syntax.

share|improve this answer
haven't ignored/forgotten about this answer, just haven't had the time to go play with this yet. – Kev Sep 10 '10 at 8:24

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.