Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to secure some folders/directories on my website which is running under IIS6, but I don't want to enter the users in Active Directory or make them windows users in any way. I have the users/passwords in a database currently. In the past I had to purchase special ISAPI filters/applications in order to create password protected directories that could look up users/pass in DB or a flat-file (like an .htaccess type thing)... something like or or

assuming I don't want to do any custom development... what are my options for making this work in IIS6? Are there any free/open-source options?

share|improve this question
up vote 0 down vote accepted

Okay... I think I have a slightly better understanding of what you're looking for now.

Here's a couple more options to consider:

Change to Apache for Win32

This would solve your problem... for free... but only you can assess if it's worth the effort to make the move.

ISAPI Rewrite

I'm not positive this will work for you... but I seem to recall others being able to do .htaccess stuff with it. You'll have to research this one a bit.


Probably too expensive for you.

The free version will allow up to 3 users I think. IISPassword will allow you to protect your site without using system user accounts.

I'm not sure if any solution is REALLY going to help you get away from development... but this should be close.

share|improve this answer
this board doesn't seem to be as hoppin as StackOverflow... but I'm going with IISPassword for now. Thanks! – Nick Franceschina Aug 26 '09 at 0:00
Keep in mind, StackOverflow is a bit older... 271,000+ questions vs the 12,000+ here. Give us some time. We'll get there eventually. ;-) – KPWINC Aug 26 '09 at 3:26

I was actually going to recommend authx by flicks software but I see you've already mentioned it.

That's probably the EASIEST way to do it... but here's another example you may wish to look into:

Hope this helps.

share|improve this answer
thanks... but trying not to do any custom development if I dont have to. waiting to see if anyone has any free/open-source options – Nick Franceschina Aug 25 '09 at 15:51

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.