IIS and domain security

21 Jun 2005 7:18 PM

Phil

I have a directory under my wwwroot folder that I would like accessible over
the web where my internal domain users do NOT have to enter credentials. But
any user not on our domain must enter credentials. That way all my internal
users do not have to enter a username/pwd everytime they access the site,
but our customers and any external users MUST enter username/pwd. I have
tried both IIS security settings and NT security settings and a combo of both
but I just cant get it work this way. I appreciate any replies. Thank you.

22 Jun 2005 1:21 PM

Ken Schaefer

What do you mean by "internal domain users"? All your users are going to
need some kind of Windows credentials (i.e. a domain account).

If you mean that users on your internal network should not need to enter
their username/password, then ensure that the website is in their Internet
Explorer Intranet security zone. See this KB article for a full set of
requirements:
http://support.microsoft.com/?id=258063

If the internal users are accessing the site via a fully-qualified DNS name,
then you can use a Group Policy Object (GPO) to put that FQDN into their IE
intranet zone.

Cheers
Ken

--
IIS Blog: www.adopenstatic.com/cs/blogs/ken/
Web: www.adopenstatic.com

Show quoteHide quote

"Phil" <P***@discussions.microsoft.com> wrote in message
news:647D0F53-ECE5-4D05-BE41-D3739028308F@microsoft.com...
:I have a directory under my wwwroot folder that I would like accessible
over
: the web where my internal domain users do NOT have to enter credentials.
But
: any user not on our domain must enter credentials. That way all my
internal
: users do not have to enter a username/pwd everytime they access the site,
: but our customers and any external users MUST enter username/pwd. I have
: tried both IIS security settings and NT security settings and a combo of
both
: but I just cant get it work this way. I appreciate any replies. Thank
you.