up vote 1 down vote favorite
share [g+] share [fb]

Basic authentication question. I have my website up and it is set up to be used by Windows Active Directory users.

How can I control access to the website within AD users so that some have access and some don't?

Is this something I can do from IIS console?

link|improve this question
1  
Don't have time for a full answer, but put the users in an access group, then assign file permissions to only that group. Also, should be using at least HTTP Digest, Win Integrated would be better. Basic sends passwords in clear text, easily scooped up be nefarious people. – Chris S♦ Dec 11 '11 at 15:28
feedback

migrated from stackoverflow.com Dec 11 '11 at 13:29

This question came from our site for professional and enthusiast programmers.

2 Answers

up vote 0 down vote

Yes, I think that you can use the IIS Shell. I'm not sure, though.

You may want to take a look at this: http://technet.microsoft.com/en-us/library/cc778815(WS.10).aspx

To quote the site:

"You can control which users and computers are allowed to access your Web server and its resources. You can use both NTFS and Internet Information Services (IIS) security features, such as Web permissions and IP address restrictions, to specific access rights to Web sites, directories, and files."

link|improve this answer
feedback
up vote 0 down vote

For IIS version 7 and higher: open the IIS Manager, select application or folder, activate .NET Authorization Rules, edit rules. Use the following link to read more about ASP.NET Web Application Security

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard