Solved

IIS Login integration in INtranet?

Posted on 2004-03-29
13
326 Views
Last Modified: 2008-02-28
I am working on the Intranet of my Company. For login security, I am told to integrate IIS Login in Intranet?. Can anyone told me how to do this???

500 globes for the solution...

Khurram.
0
Comment
Question by:khurram007
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 5
  • 2
  • +1
13 Comments
 
LVL 30

Expert Comment

by:third
ID: 10702937
0
 
LVL 21

Expert Comment

by:ap_sajith
ID: 10703011
Open Up the IIS console (You can easily access it by Typing in inetmgr in the Run command line or from the programs list)
Choose the Site/Virtual directory for which Integrated Windows Authentication is to be enabled.
Right Click on the site and choose the properties tab
Select the Directory Security Tab
Uncheck the 'Anonymous Access' Option.
Check the 'Integrated Windows Authentication' Option
Click OK
Click Apply and colse the IIS Console


For more information on authentication methods.. refer.. http://www.winnetmag.com/Web/Article/ArticleID/15843/15843.html

Cheers!!
0
 
LVL 21

Expert Comment

by:ap_sajith
ID: 10703014
Another good article...
http://www.4guysfromrolla.com/webtech/020201-1.shtml

Cheers!!
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 11

Expert Comment

by:mouatts
ID: 10703959
If you want them to avoid having to login to the site as well then they will have to check 'Automatic Login in Intranet Zone' as well under the security custom button of IE.

In addition the server will need to be connected to a domain control that holds the users accounts or can chain on to them.

Steve
0
 
LVL 2

Author Comment

by:khurram007
ID: 10704600
Well, what should I have to do in the coding department other than enabling security in IIS???

Khurram
0
 
LVL 11

Expert Comment

by:mouatts
ID: 10704636
Assuming that you have no login stuff within your site (ie a username password system that doesn't use the Windows Password system) then you have nothing else to do.

Steve
0
 
LVL 2

Author Comment

by:khurram007
ID: 10704713
I have tried to access the application from a parallel pc in my domain, and it accessed the default page easily without needing any authentication :(

Khurram
0
 
LVL 11

Expert Comment

by:mouatts
ID: 10704916
Assuming that you have the 'Automatic Login in Intranet Zone' with the browser checked its because you are already logged into the domain and therefore do not need to re-authenticate as it knows who you are.

If this is not the case then possibly you need to restart IIS and conceivably clear the cache on the browser. This latter course of action isn't to resolve a problem with the set up but because there is a bug in IE that causes a page to be cached and no head request is ever sent to established if it is still to be used so it redisplays the page from cache without reference to the server.

HTH
Steve
0
 
LVL 2

Author Comment

by:khurram007
ID: 10712939
Can u guide me what should I do to check whether the security is applicable or not??? after all I need to test it, and display the function working...

Khurram
0
 
LVL 11

Expert Comment

by:mouatts
ID: 10714755
OK first to prove to your self that it is working: create a page on the server that looks like the one below and point you browser to it.

<html><BODY>
<TABLE border="1">
<%
for each field in request.servervariables
response.write( "<TR><TH align=left valign=top>"&field&"</TH><TD valign=top>"&request.servervariables(field)&"&nbsp;</TD></TR>")
next
%>
</TABLE>
</body>
<HTML>

If you have been authenticated then the variable LOGON_USER will have you username in it.

Next to prove it to someone else go to a PC and turn off the 'Automatic Login in Intranet Zone' and reboot the PC. When you connect to the site you should be prompted for the username and password.

Alternatively if it is possible to log off your domain, for example by creating a local account and then accessing your server by IP address, you again should be prompted for the username and password.

HTH
Steve
0
 
LVL 2

Author Comment

by:khurram007
ID: 10722163
Can u tell me how to turn off the 'Automatic Login in Intranet Zone' ???

Khurram
0
 
LVL 11

Accepted Solution

by:
mouatts earned 500 total points
ID: 10725106
Within internet explorer go to Tools, Internet Options, click the security tab, then custom level and the option is near the bottom of the list.

Steve
0
 
LVL 2

Author Comment

by:khurram007
ID: 10747406
Nice Job Mouatts...

Keep it up!!!

Here r ur 500 globes...

Khurram
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Hello, all! I just recently started using Microsoft's IIS 7.5 within Windows 7, as I just downloaded and installed the 90 day trial of Windows 7. (Got to love Microsoft for allowing 90 days) The main reason for downloading and testing Windows 7 is t…
I would like to start this tip/trick by saying Thank You, to all who said that this could not be done, as it forced me to make sure that it could be accomplished. :) To start, I want to make sure everyone understands the importance of utilizing p…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question