Integrated Authentication in IIS 6 from the command line

Question

In deploying a new version of our ASP.NET application, we need to set the authentication method for a particular page to be "Integrated only." We can do this from the IIS managment console, but would like to write a script (batch or powershell, doesn't matter) that will make the change to ensure that everything goes smoothly in the deployment.

The rest of the pages in the application will allow different authentication methods, but this particular page will only allow integrated.

In the same deployment, we also need to change the location of the custom error pages for all 401 errors, preferably also from the command line.

Answer 1

AdsUtil.VBS is your friend:

adsutil.vbs set  W3SVC/1/root/AuthNTLM true
adsutil.vbs set  W3SVC/1/root/AuthAnonymous false
adsutil.vbs set  W3SVC/1/root/AuthBasic  false
adsutil.vbs set  W3SVC/1/root/AuthPassport false
adsutil.vbs set  W3SVC/1/root/AuthMD5 false

Which is the same as:

adsutil.vbs set  W3SVC/1/root/AuthFlags 5

Note that <1> is your web site ID.

For CustomErrors, you need to update the root/HTTPErrors field which is actually a LIST item. David Wang has the appropriate script for this: chglist.vbs

chglist.vbs W3SVC/1/HttpErrors 404 404,*,URL,/CustomErrors/404.asp /COMMIT

For individual files, you can add them after the /Root/ Path:

adsutil.vbs set W3SVC/1/root/MyFile.txt/AuthFlags 5

Answer 2

You can control authentication from a web.config file. You would put the following in your web.config (from http://msdn.microsoft.com/en-us/library/aa291347(VS.71).aspx):

<system.web>
   <!-- mode=[Windows|Forms|Passport|None] -->
   <authentication mode="Windows" />
</system.web>

Alternatively, you could check out the System.DirectoryServices API for IIS 5 & 6 (http://msdn.microsoft.com/en-us/library/system.directoryservices.aspx) or the Microsoft.Web.Administration API for IIS 7 (http://msdn.microsoft.com/en-us/library/microsoft.web.administration.aspx).