Hi,

Configuration:

1. Windows 2003 R2 - IIS 6.0.
2. Visual Studio 2008 C#.

Problem:

Authenticate users to allow / disallow them to connect to a particular web site.
Specifically only users from a particuar OU in Active Directory can connect.
(I know IIS allows for this). However here is the catch, I need to record the time
when they first connect. Then disable there account 7 days after they connect.
Note this has to be after they initially log on..

Possible Solutions ???:

Ok what I am figuring the way todo this is via the .NET Http module.
(http://msdn.microsoft.com/en-us/library/bb398986.aspx)
So AD lets them through then it goes into the Http module and it can perform a database
lookup to see if the user can still log on or not. (I will then have a schenduled program that iterates through
the accounts and disables them after the 7 days period).

Am I on the right track here any sample code somebody can point me to? (Even
if it just how todo the authentication). Or, am I best writing an ASPI filter?

Any input greatly appreciated,

Ward.