I'm not an IIS or Active Directory expert by any means so I want to present a scenario here and see if what we want to accomplish is feasible. We have an application hosted on Windows Server 2008 R2 ...
I have two websites. One is an "intranet," one is a public site that has "admin" areas: www.example-intranet.com www.example.com They are both running on the same IIS 6 box. ...
I want to setup basic authentication on a virtual directory (in IIS6). It looks as if a malicious user can use the dialog (uid/pwd challenge) to try and login with a domain account and lock this ...