Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to provide access to my website through IIS Basic auth (already working) but I don't want to give out OS level logins, to my testers/previewers.

Is this possible? How can I do this? I basically just don't want these IIS accounts to be windows accounts. Because then couldn't someone else potentially RDP in with that account?

share|improve this question
up vote 1 down vote accepted

There's no other way that I know of to use any type of IIS authentication (Basic or Windows Integrated authentication) without a corresponding user account, either locally or in an AD domain that the IIS server is joined to. If you're worried about those users connecting via RDP then make sure they're not in the Remote Desktop Users group.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.