Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

On IIS 7, I'd like to make it so that:

  • User from LAN (192.168.1.*) - No Authentication Required
  • User from Internet - Requires Password

I'm new to IIS from Apache, and I did it on that.

share|improve this question


You setup two IIS sites pointing to the same content. Each IIS site has a different IP (this way you can use the same DNS name). Setup your internal DNS so that it points to the site thats set to anon. On your external site, nat to the IP thats setup for authentication.

Alternative two, if your clients are on the domain, just add your site to thier trusted sites zone and set it to auto login.

share|improve this answer
Are you still need 2 sites when you can enable only "integrated authentication"? – Vick Vega Jan 15 '12 at 23:10
if you're on a domain, no. Simply add the web site to your trusted sites (or intranet zone) and then make sure auto logon is enabled. See this link – Eric C. Singer Jan 16 '12 at 1:46

You can do it with a single site if your server is in an Active Directory and you enable Digest Authentication. The public users will ignore it. Your intranet users will be authenticated using their Windows Active Directory credentials.

For more control, you can do like one of the previous posters said, and use 2 IIS instances running on different IP addresses or different host names on the same IP address (virtual host). This has the added benefit of using Forms authentication for the public users and Windows Digest authentication for your Intranet users.

Either way, once you have the user logged in, you can specify which users or groups should be allowed access based either on their Membership roles or their Windows Active Directory group memberships.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.