Hi,


This problem is driving me nuts.


- I have set up an IIS 6.0 application (in perl/cgi) and put it into a
virtual directory (actually it's a SOAP webservice)
- Since this app does AD domain administration tasks, it must run under
a "Domain Admin" account.
- Users accessing it are not domain admins.
- For testing, I've checked the "Enable anonymous access" box and put
domain admins credentials in the textboxes. *This way everything works
like a charm*


Now, of course, I want to control who can run this application.

- I tried disabling anonymous access, and enabling the "Windows
integrated authentication" then set the proper NTFS security rights on
my virtual directory.
this way, I get "401 unauthorized" messages.

- I tried putting a domain admin account in the Application Pool
"Identity" tab, and this gives the same results.



Is there a way in IIS to allow a group of people to access an
application and have that application run always under the same
specific admin account, without using the Anonymous Authentication ?




Thanks for any info.

<stephanegrego***@gmail.com> wrote in message
Please don't multi-post.  A cross post might have been appropriate  trying
to help you on .iis ...

SetSPN.Exe
AD Custom App Pool identity, Custom IUSR identity, and a lot more.
IIS 6 on Win2003 with SP1
Cannot Create new VS Web Project
Custom Errors
IIS6 and Authentication across Servers and Domains
Anonymous Login Failure
Cookie problem with ShowModalDialog and window.open
Basic Authentication - Sometimes No Prompt
anonymous user does not work