How to make it so IIS can Access the AD for Windows Authentication

already did that, i already stated that its set to windows authentication.

what do you mean by grant access in general? I already enabled windows auth. Windows auth work except when trying to access the site from a computer while its hosted on the web server.

Hi,

I mean to say that whatever user accesses the web site must also have the required permissions.  Just setting the application to impersonate some other user will not generally allow an unauthorised user access to the web site.

If you use windows auth, then the remote user must be logged on to the domain with credentials that have access to the web site.

Check the IIS web site log file to discover what user is being denied access.

also:

>> it just says "you are not authorized"

there is always additional detail provided - transpose it here for further comment if you need it.

Cheers.

thanks for ya response yesterday i had to run lines all day so couldent respond, but i will back into work tomorrow and will transpose it tomorrow for ya thanks!

This line in your config file is going to be problematic:

<identity impersonate="true" userName="Domain/XXXX" password="XXXXX"/>
 
This tells the Framework that it is to impersonate this user no matter who is actually accessing the application.  If that user has access based on the Roles you are using then everything is fine, otherwise everyone will be denied access.

Try changing it to simply:

<identity impersonate="true"/>

Let us know what you find.

Dave Dietz
 

Ya the user has access based on roles.

Here is the addtional info:

You are not authorized to view this page
You do not have permission to view this directory or page using the credentials that you supplied because your Web browser is sending a WWW-Authenticate header field that the Web server is not configured to accept.
--------------------------------------------------------------------------------

Please try the following:

Contact the Web site administrator if you believe you should be able to view this directory or page.
Click the Refresh button to try again with different credentials.
HTTP Error 401.2 - Unauthorized: Access is denied due to server configuration.
Internet Information Services (IIS)

--------------------------------------------------------------------------------

Technical Information (for support personnel)

Go to Microsoft Product Support Services and perform a title search for the words HTTP and 401.
Open IIS Help, which is accessible in IIS Manager (inetmgr), and search for topics titled About Security, Authentication, and About Custom Error Messages.

I thought i configured it, but sounds like i may have done it wrong.

Is line 5 above supposed to be a close tag?  If it actually is set this way the authentication, roleManager and identity sections are all being ignored entirely which could explain some of what is happening.

Dave Dietz

must of made a mistake when i posted it sorry, no its not a close tag in the code of my program its this.

<system.web>
 
<authentication mode="Windows"/>
                <roleManager enabled="true" defaultProvider="AspNetWindowsTokenRoleProvider"/>
                <identity impersonate="true" userName="Domain/XXXX" password="XXXXX"/>
 
</system.web>

                                              

1:
2:
3:
4:
5:
6:
7:

1. - on IIS web server where you run your website set only Integrated Windows authentication (Riht Click od Web - Properties - Directory Security - Edit)
2. - <authentication mode="Windows"/>
3. - !!! add your website to IE Local intranet (Tools - Internet Options - Security - Local intranet - Click on Sites button - Check Automatically detect ..... - Click Advanced button - write your website (for example http://site.mydomain.com or http://www.mydomain.com, check if you us HTTPs - click Add button and close). You can do it throught GP in AD for all users.
Now if users go to your web site, IE use user logon account and authorized your user. In Firefox or Opera must users write logon name and password to the logon box.

sorry for the long response time, i did all the steps and still getting.

You are not authorized to view this page
You do not have permission to view this directory or page using the credentials that you supplied because your Web browser is sending a WWW-Authenticate header field that the Web server is not configured to accept.
--------------------------------------------------------------------------------

Please try the following:

Contact the Web site administrator if you believe you should be able to view this directory or page.
Click the Refresh button to try again with different credentials.
HTTP Error 401.2 - Unauthorized: Access is denied due to server configuration.
Internet Information Services (IIS)

--------------------------------------------------------------------------------

Technical Information (for support personnel)

Go to Microsoft Product Support Services and perform a title search for the words HTTP and 401.
Open IIS Help, which is accessible in IIS Manager (inetmgr), and search for topics titled About Security, Authentication, and About Custom Error Messages.