Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'd like to use basic HTTP authentication to keep people out of our dev site instance since it is unfortantly exposed to the wild internet.

However, in IIS7, the only authentication modes listed are Forms, Anonymous and Impersonation.

Where did the "Basic Authentication" module go, and how can I get it back?

share|improve this question
up vote 27 down vote accepted

You might have to install the basic authentication module for IIS.

For vista it is: Control Panel -> Programs -> Turn Windows features on or off

For Server 2008: Server Manager -> Roles -> Web Server -> Add Role Services

Then in the treeview it is: Internet Information Services -> World Wide Web Services -> Security - > Basic Authentication

Click the checkbox and install. Then you should be able to see the basic authentication option.

share|improve this answer
Note that you'll likely need to close and reopen IIS Manager to see the new authentication option. – jstricker Jan 20 at 18:34

To add using PowerShell you can use the following command:

Import-Module ServerManager
Add-WindowsFeature Web-Basic-Auth
share|improve this answer
In Windows Server 2012, this worked perfectly for me. – epotter Feb 3 '13 at 3:55

TechNet is your friend :)

IIS 7.0: Configure Basic Authentication

share|improve this answer
Where is says to select Basic Authentication - that option is missing :| – FlySwat Jun 22 '09 at 3:06
Open Control Panel -> Programs and Features -> Turn windows features on or off -> Scroll down to IIS, expand all of the nodes to find the ‘Security’ node within there and look for “basic authentication”. Check the box, then click OK. – Sean Earp Jun 22 '09 at 3:35
The TechNet page doesn't mention the fact that the feature has to be enabled before it can be configured. – dfjacobs Apr 15 '12 at 2:41

If you want both basic authentication and forms authentication:

Install Helicon Ape free and put .htacces and .htpasswd files in the root of the site you are trying to protect.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.