0
votes
1answer
213 views

IIS7 - Restrict access to an intranet site to a specific group of users

I have an ASP.NET site running in IIS7 on a local intranet. I want to restrict access to this site to a specific group of users. I think I should be able to do this by using Windows Authentication ...
0
votes
0answers
29 views

Securing files on IIS 7 and Windows Server 2008 Server

What's the best practice for securing a file on an IIS 7 web application running on Windows 2008 server? I have the following requirements and ideas: Requirements: A authenticated user to my web app ...
1
vote
1answer
2k views

The trust relationship between the primary domain and the trusted domain failed

Scenario: We have an application server (IIS 7.0, Windows 2008 R2) and a seperate database server (SQL 2008) for both our test and production environments (so 4 servers total). Our application server ...
1
vote
1answer
377 views

Secure LDAP Authentication Issue

I am using the following C# code in the code behind of a webform deployed in an ASP.NET 4 (4.0.30319) application pool on Server1 and Server2. PrincipalContext pc = new ...
2
votes
1answer
929 views

What determines the combination of ciphers available on an SSL server?

I have a site that has been bound to a new SSL certificate with SAN (4 additional names). The certificate has a 2048-bit key. The problem is that it works on some browser/OS combinations but not on ...
2
votes
2answers
4k views

IIS 7 - 401.2 error by hostname but not by IP address

I am experiencing an issue with an IIS 7 application on our network. The problem is as follows: If a user browses to the site by IP address (http://172.16.10.32/site) the application loads fine, ...
1
vote
1answer
217 views

Enable basic authentication in IIS for remote requests, but not for local ones?

Is there a way in IIS to enable basic authentication for remote requests while leaving the website open for local requests? I need external users to authenticate to access a site, but users on the ...
0
votes
1answer
198 views

IIS7: Is it possible to use Forms Authentication and IP Restrictions at the same time?

I am managing a web application that uses forms authentication. Most of it (including the login functionality) was written by a 3rd party so I cannot change it's architecture. The web application uses ...
1
vote
1answer
304 views

SSL Certificates, two-way authentication and loadbalancers

We're looking to implement two-way authentication with client certificates for a privileged subset of our application users. The idea will be that if a certificate is detected the user will be asked ...
1
vote
2answers
1k views

IIS ASP.Net windows authentication doesn't work

I have an intranet web application. Even though I've set "Windows Authentication = Enabled" (and all other Authentications are disabled), when the application tries to access resources, it is treated ...
1
vote
2answers
3k views

IIS Identities: Application Pool vs Connect As in Basic Settings

In the Basic Settings section of a website in IIS 7.5, there is an option to specify a user account via Connect As.... If this is kept off, pass through authentication is used. I assumed that would ...
1
vote
0answers
99 views

Basic auth in IIS7 without impersonation

I have an IIS 7 site set up with its own app pool. The app pool is running as a specific user, and the site is set to run as the app pool identity. I want to add basic-auth style protection to the ...
0
votes
1answer
440 views

Can't access aspx page after IIS reset using computer name only ip and localhost

After installing a fix in a site, and doing a iis reset we are unable to access (gets 401) the site using the computer name. Accessing using the ip-adress or localhost works fine, and it worked fine ...
1
vote
1answer
124 views

How to secure an IIS Site (HTML One) to be available only within a specific domain?

I'm wondering if there is a way to secure an IIS site (Static HTML Pages) to be available only within a specific domain (i.e. user should submit his domain user name and password to browse the site)? ...
1
vote
1answer
821 views

How to stop Redirect (forms authentication) from 'root' URL?

I have an ASP.NET application with Forms Authentication enabled, deployed to an IIS 7 server. In the web.config file I have added <location> sections to exclude the default documents ...
0
votes
1answer
160 views

IIS 7 adsutil set uncauthenticationpassthrough true equivalent

We're having trouble finding an IIS 7 equivalent to IIS 6's "adsutil set uncauthenticationpassthrough true" command. Any feedback pointing us in the right direction would be greatly appreciated.
1
vote
1answer
1k views

Which built-in account is used for Anonymous Authentication in IIS 7?

We know that Microsoft IIS 7.0 offer a slew of authentication methods such as Anonymous Authentication, Form Based Authentication, Digest Authentication, etc. I read from Professional IIS 7 published ...
1
vote
0answers
356 views

Digest Authentication for IIS7 + SvnBridge

I'm trying to install SvnBridge on my TFS Server running Windows Server 2008 R2, TFS, and now SvnBridge in an IIS7 website. http://svnbridge.codeplex.com/ When I attempted to visit the project ...
0
votes
1answer
216 views

IIS 7 cannot log into Sql Server Database

I have an IIS 7 application that uses a domain login. (basic settings, connect as) The application would log in as the server name at first until I set the application in it's own application pool. ...
0
votes
1answer
559 views

Is it possible to configure IIS to always default Anonymous authentication to use application pool identity?

Is it possible to configure IIS to always default the identity settings for Anonymous authentication to use application pool identity? There is never a reason I would want it otherwise so it's ...
3
votes
2answers
2k views

Getting 401 when using client certificate with IIS 7.5

I'm trying to configure a web site hosted under IIS 7.5 so that requests to a specific location require client certificate authentication. With my current setup, I still get a "401 - Unauthorized: ...
0
votes
1answer
517 views

IIS 7: Disable authentication for certain client IPs

I have a virtual directory that's protected with basic authentication. I'd like to disable authentication for certain IPs, so that all requests from e.g. 127.0.0.1 are allowed without asking for ...
0
votes
1answer
748 views

Why can't Windows Server 2008 create cookies?

Scenario: I have a web application (SnapshotServer) which uses a WebBrowser control to take a snapshot images of a web page. I use a WebBrowser control within SnapshotServer to navigate to a entry ...
1
vote
2answers
1k views

Unable to set NTFS permissions for ApplicationPoolIdentity on Windows 2008 SP2

On Windows 2008 R2 I am able to set NTFS permissions for an application pool's synthesised ApplicationPoolIdentity account thus: ICACLS d:\websites\site1\www /grant "IIS AppPool\site1":(CI)(OI)(M) ...
0
votes
1answer
122 views

How to read a file as the App Pool identity rather than the authenticated user

I want to have an internal website that automatically authenticates users based on their network credentials. However, I want to have the website display image files that are in a directory that most ...
0
votes
1answer
96 views

users are logged out of my asp.net site once a day. how do I fix it in iis7?

My application uses Forms authentication to log users into the site with their Active Directory credentials. We just switched servers for the app and now they are logged out about once a day. It ...
0
votes
1answer
2k views

IIS7 manager password problems after Windows administrator password change

Our network administrator recently left and, until we get another one, I'm filling in trying to keep the servers running :o I changed the administrator password for the server (Windows Server 2008), ...
0
votes
1answer
377 views

IIS7 authentication

To give our user's the ability to protect content on their IIS6 sites we used a tool called IISPassword which emulates .htaccess to provide Basic authentication. There isn't support for IISPassword ...
0
votes
1answer
1k views

IIS reverse proxy to windows authenticated internal site

I have an internal windows authenticated website that I need to expose anonymously to external users. extern: http://foo.com/ (public) intern: http://privatefoo/ (requires windows auth) I want ...
3
votes
3answers
1k views

restrict access to a website using Windows Server 2008

What do I need to do in Windows Server 2008 to restrict access to a website (or directory in the website) to only certain users?
1
vote
1answer
745 views

IUSR vs. Application Pool credentials

I have a IIS7/ASP.NET application running with the following configuration: Anonymous authentication (IUSR). Application Pool running as a domain account If IUSR is denied the "logon locally", ...
5
votes
1answer
9k views

IIS7 Windows Authentication Providers

Does anyone know what the different windows authentication providers for IIS7 means. There are 3 available providers NTLM Negotiate Negotiate:Kerberos NTLM is pretty obvious I think its NTLM ...
1
vote
2answers
5k views

IIS 7 Authentication: Certain users can't authenticate, while almost all others can

I'm using IIS 7 Digest authentication to control access to a certain directory containing files. Users access the files through a department website from inside our network and outside. I've set NTFS ...
3
votes
2answers
3k views

Can I set a default domain for a Windows Authenticated website in IIS7?

I have an intranet site using Windows Authentication. When users are prompted for credentials, they enter: User: domain\username Pass: SomePassword It'd be nice if they could leave off the domain\ ...
0
votes
1answer
219 views

Is it possible to configure simultaneous authentication against 2 different AD domains by IIS 7?

Basically, I need to be able to attempt to authenticate against two different AD domains from IIS. I'd like to be able to automatically query both AD's and whichever comes back with an authentication ...
0
votes
2answers
243 views

ISS7 authentication doesn't work on servername

Not sure if I put correct title but here is my problem: Local (home network) IIS 7, default web site bind to any IP on port 81, Anonymous Auth disabled, Windows Auth enabled If I go to ...
2
votes
2answers
850 views

Lock down a site using Forms Auth in IIS7 with Windows Auth

I have an ASP.NET MVC 1.0 application that uses Forms Authentication. We are using Windows Server 2008. I need to lock down the site so that only certain users (in AD Groups) can access the site. ...
0
votes
1answer
808 views

IIS7 RPC site authentication resetting

I'm trying to get TS gateway going on a 2008 Server. I'm running into trouble with authentication. I found that I needed to enable Windows Authentication in the RPC site. While Windows ...
1
vote
1answer
1k views

Intermittently, IIS7 requests get stuck in WindowsAuthenticationModule

We're running an IIS7 server hosting several dozen websites. Several of these websites are all part of the same legacy app we've developed. These sites all run the same code and run in the same app ...
5
votes
3answers
5k views

What is Causing this IIS 7 Web Service Sporadic Connectivity Error?

On sporadic occasions we receive the following error when attempting to call an .asmx web service from a .Net client application: "The underlying connection was closed: A connection that was expected ...
2
votes
2answers
4k views

IIS7 is not propagating authorization to subdirectories

Our application is using forms authentication and the solution has been working well. Recently one of our 2008 servers developed a problem where the authorization is not being propagated to ...