I am interesting in creating an web server that clients can login from the internet. These external web users would not be users on the internal company LAN. Does IIS have the ability to require a web user to enter a username and password to access particular pages on a companies external website? If not, what does

Thanks for any help

Andy

External Website Authentication by Invotion

Invotion
Tue Feb 10 20:40:17 CST 2004

Andy,

No. IIS can not force authentication unless it knows who
the users are ahead of time - local or domain user
accounts. What you can do is require authentication to
view your pages via script, or using .Net you can limit
access via your web.config file.

Sincerely,
Invotion Engineering Team
Advanced Microsoft Hosting Solutions
http://www.Invotion.com

>-----Original Message-----
>I am interesting in creating an web server that clients
can login from the internet. These external web users
would not be users on the internal company LAN. Does IIS
have the ability to require a web user to enter a username
and password to access particular pages on a companies
external website? If not, what does?
>
>Thanks for any help.
>
>Andy
>.
>

Re: External Website Authentication by Ken

Ken
Tue Feb 10 20:58:55 CST 2004

To "login" sucessfully requires that the external client enter some kind of
username/password that is acceptable to the server. The server needs to have
access to a master list of usernames/passwords that it can reference to see
whether to allow the login or not.

So, where are you storing the usernames/passwords? In Windows user accounts
database? in an SQL database? If it's a Windows username/password, then IIS
can do this. Just disable "Allow Anonymous Access" in the website properties
via the IIS Manager (website/folder/page properties -> security tab -> edit
anonymous access -> uncheck "Allow anonymous access"). This can be set on a
website, individual folder or individual file level.

You then set the NTFS permissions on the website/folder/file in question.
Which ever Windows users/groups that should be allowed to access the pages
should be given RX permissions.

Cheers
Ken

"Andy" <anonymous@discussions.microsoft.com> wrote in message
news:1401563D-A294-48CD-8DCF-5752504F14F2@microsoft.com...
: I am interesting in creating an web server that clients can login from the
internet. These external web users would not be users on the internal
company LAN. Does IIS have the ability to require a web user to enter a
username and password to access particular pages on a companies external
website? If not, what does?
:
: Thanks for any help.
:
: Andy



Re: External Website Authentication by doug

doug
Wed Feb 11 07:34:56 CST 2004

Use local accounts instead of domain accounts. Before
doing this though, read up on the Microsoft licensing for
this. Each authenticated user will need a CAL.

Alternatively, write some ASP that stores the usernames
and passwords in a SQL database...

doug

>-----Original Message-----
>To "login" sucessfully requires that the external client
enter some kind of
>username/password that is acceptable to the server. The
server needs to have
>access to a master list of usernames/passwords that it
can reference to see
>whether to allow the login or not.
>
>So, where are you storing the usernames/passwords? In
Windows user accounts
>database? in an SQL database? If it's a Windows
username/password, then IIS
>can do this. Just disable "Allow Anonymous Access" in
the website properties
>via the IIS Manager (website/folder/page properties ->
security tab -> edit
>anonymous access -> uncheck "Allow anonymous access").
This can be set on a
>website, individual folder or individual file level.
>
>You then set the NTFS permissions on the
website/folder/file in question.
>Which ever Windows users/groups that should be allowed
to access the pages
>should be given RX permissions.
>
>Cheers
>Ken
>
>"Andy" <anonymous@discussions.microsoft.com> wrote in
message
>news:1401563D-A294-48CD-8DCF-
5752504F14F2@microsoft.com...
>: I am interesting in creating an web server that
clients can login from the
>internet. These external web users would not be users
on the internal
>company LAN. Does IIS have the ability to require a web
user to enter a
>username and password to access particular pages on a
companies external
>website? If not, what does?
>:
>: Thanks for any help.
>:
>: Andy
>
>
>.
>