I have a folder on our site that we want to secure. The information is not
confidential but we want "unknown" users to have to put a user and pass in
to access teh files in the folder. However if the user is logged on to the
domain we don't want to be prompted.
I removed Anonymous access in IIS and have basic and Windows Integrated
turned on. I removed the IUSR account from the NTFS permissions of the
folder. I created a group and gave it read rights to the folder. In that
group are various users from our domain and a user created on the local web
server. The idea is that we would distribute this local user and pass to
people on the net that would need access to the page.
When I access the web site with the netbios name(http://servername) all
works fine, I (being in the group) can get to the pages with out being
prompted for a log on. Other users without access are prompted, if I put
the local user and pass they get to the pages. However, if I access the
site with the dns domain name. I get prompted for a password. I also get
prompted if I access the site with the ip address. If I type my user
(domain\user) and pass in, then I get access. We would like to bypass the
logon if we are logged into the local network.
Anyone know why it only works if I use the netbios name.