Home All Groups Group Topic Archive Search About

how to limit access to some domain-users?

Author
8 May 2006 7:20 AM
phil
Hi,

We run an intranet application with integrated windows authentification, so
no logon-prompt appears, but then all domain-users can use that aplication.
How to limit that to some domain-users? The only limitations i can see in
IIS is domain and IP restrictions, not user restrictions.
Thanks
Phil

Author
8 May 2006 10:21 AM
Ken Schaefer
Configure NTFS permissions on the files/folders. Remove permissions from
"Everyone", and add in the users/groups that should have access to the
files/folders.

IIS doesn't perform authentication (or authorization) itself. It relies on
Windows to do that. So you use Windows user accounts, and you use Windows
NTFS permissions.

Cheers
Ken

Show quoteHide quote
"phil" <s**@sd.dc> wrote in message
news:O4g7$AncGHA.5016@TK2MSFTNGP04.phx.gbl...
> Hi,
>
> We run an intranet application with integrated windows authentification,
> so
> no logon-prompt appears, but then all domain-users can use that
> aplication.
> How to limit that to some domain-users? The only limitations i can see in
> IIS is domain and IP restrictions, not user restrictions.
> Thanks
> Phil
>
>
Author
8 May 2006 1:31 PM
phil
Thanks

Show quoteHide quote
"Ken Schaefer" <kenREM***@THISadOpenStatic.com> wrote in message
news:e8TR0kocGHA.5048@TK2MSFTNGP04.phx.gbl...
> Configure NTFS permissions on the files/folders. Remove permissions from
> "Everyone", and add in the users/groups that should have access to the
> files/folders.
>
> IIS doesn't perform authentication (or authorization) itself. It relies on
> Windows to do that. So you use Windows user accounts, and you use Windows
> NTFS permissions.
>
> Cheers
> Ken
>
> "phil" <s**@sd.dc> wrote in message
> news:O4g7$AncGHA.5016@TK2MSFTNGP04.phx.gbl...
> > Hi,
> >
> > We run an intranet application with integrated windows authentification,
> > so
> > no logon-prompt appears, but then all domain-users can use that
> > aplication.
> > How to limit that to some domain-users? The only limitations i can see
in
> > IIS is domain and IP restrictions, not user restrictions.
> > Thanks
> > Phil
> >
> >
>
>