Authentication

14 Jun 2006 2:33 PM

Eng.Rana

Hello All,

i was wondering what is the main difference between the windows
authentication and mixed mode authentication??
according to security recommendations, we should enable windows
authentication, rather than mixed one, i don get the point why do we
refuse the mixed mode authentication, although it includes windows
authentication together with an extra layer of defense by the aid of an
extra authentication mechanism, sql authentication.

i hope i can find out why??
if anyone can recommend me some papers or books, i'll be thankfull but
i hope it explains from the security point of view.

Thanx for time and sorry for interruption

18 Jun 2006 5:42 AM

Bernard Cheah [MVP]

Mm.... read -
How IIS authenticates browser clients
http://support.microsoft.com/?id=264921

--
Regards,
Bernard Cheah
http://www.iis.net/
http://www.iis-resources.com/
http://msmvps.com/blogs/bernard/

<Eng.R***@gmail.com> wrote in message

Show quoteHide quote

news:1150295605.473837.281590@p79g2000cwp.googlegroups.com...
> Hello All,
>
>
> i was wondering what is the main difference between the windows
> authentication and mixed mode authentication??
> according to security recommendations, we should enable windows
> authentication, rather than mixed one, i don get the point why do we
> refuse the mixed mode authentication, although it includes windows
> authentication together with an extra layer of defense by the aid of an
> extra authentication mechanism, sql authentication.
>
> i hope i can find out why??
> if anyone can recommend me some papers or books, i'll be thankfull but
> i hope it explains from the security point of view.
>
> Thanx for time and sorry for interruption
>