Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Basic authentication question. I have my website up and it is set up to be used by Windows Active Directory users.

How can I control access to the website within AD users so that some have access and some don't?

Is this something I can do from IIS console?

share|improve this question

migrated from Dec 11 '11 at 13:29

This question came from our site for professional and enthusiast programmers.

Don't have time for a full answer, but put the users in an access group, then assign file permissions to only that group. Also, should be using at least HTTP Digest, Win Integrated would be better. Basic sends passwords in clear text, easily scooped up be nefarious people. – Chris S Dec 11 '11 at 15:28

Yes, I think that you can use the IIS Shell. I'm not sure, though.

You may want to take a look at this:

To quote the site:

"You can control which users and computers are allowed to access your Web server and its resources. You can use both NTFS and Internet Information Services (IIS) security features, such as Web permissions and IP address restrictions, to specific access rights to Web sites, directories, and files."

share|improve this answer

For IIS version 7 and higher: open the IIS Manager, select application or folder, activate .NET Authorization Rules, edit rules. Use the following link to read more about ASP.NET Web Application Security

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.