Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I want to provide access to my website through IIS Basic auth (already working) but I don't want to give out OS level logins, to my testers/previewers.

Is this possible? How can I do this? I basically just don't want these IIS accounts to be windows accounts. Because then couldn't someone else potentially RDP in with that account?

share|improve this question

1 Answer 1

up vote 1 down vote accepted

There's no other way that I know of to use any type of IIS authentication (Basic or Windows Integrated authentication) without a corresponding user account, either locally or in an AD domain that the IIS server is joined to. If you're worried about those users connecting via RDP then make sure they're not in the Remote Desktop Users group.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.