Solved

IIS Login integration in INtranet?

Posted on 2004-03-29
13
321 Views
Last Modified: 2008-02-28
I am working on the Intranet of my Company. For login security, I am told to integrate IIS Login in Intranet?. Can anyone told me how to do this???

500 globes for the solution...

Khurram.
0
Comment
Question by:khurram007
  • 5
  • 5
  • 2
  • +1
13 Comments
 
LVL 30

Expert Comment

by:third
ID: 10702937
0
 
LVL 21

Expert Comment

by:ap_sajith
ID: 10703011
Open Up the IIS console (You can easily access it by Typing in inetmgr in the Run command line or from the programs list)
Choose the Site/Virtual directory for which Integrated Windows Authentication is to be enabled.
Right Click on the site and choose the properties tab
Select the Directory Security Tab
Uncheck the 'Anonymous Access' Option.
Check the 'Integrated Windows Authentication' Option
Click OK
Click Apply and colse the IIS Console


For more information on authentication methods.. refer.. http://www.winnetmag.com/Web/Article/ArticleID/15843/15843.html

Cheers!!
0
 
LVL 21

Expert Comment

by:ap_sajith
ID: 10703014
Another good article...
http://www.4guysfromrolla.com/webtech/020201-1.shtml

Cheers!!
0
 
LVL 11

Expert Comment

by:mouatts
ID: 10703959
If you want them to avoid having to login to the site as well then they will have to check 'Automatic Login in Intranet Zone' as well under the security custom button of IE.

In addition the server will need to be connected to a domain control that holds the users accounts or can chain on to them.

Steve
0
 
LVL 2

Author Comment

by:khurram007
ID: 10704600
Well, what should I have to do in the coding department other than enabling security in IIS???

Khurram
0
 
LVL 11

Expert Comment

by:mouatts
ID: 10704636
Assuming that you have no login stuff within your site (ie a username password system that doesn't use the Windows Password system) then you have nothing else to do.

Steve
0
Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

 
LVL 2

Author Comment

by:khurram007
ID: 10704713
I have tried to access the application from a parallel pc in my domain, and it accessed the default page easily without needing any authentication :(

Khurram
0
 
LVL 11

Expert Comment

by:mouatts
ID: 10704916
Assuming that you have the 'Automatic Login in Intranet Zone' with the browser checked its because you are already logged into the domain and therefore do not need to re-authenticate as it knows who you are.

If this is not the case then possibly you need to restart IIS and conceivably clear the cache on the browser. This latter course of action isn't to resolve a problem with the set up but because there is a bug in IE that causes a page to be cached and no head request is ever sent to established if it is still to be used so it redisplays the page from cache without reference to the server.

HTH
Steve
0
 
LVL 2

Author Comment

by:khurram007
ID: 10712939
Can u guide me what should I do to check whether the security is applicable or not??? after all I need to test it, and display the function working...

Khurram
0
 
LVL 11

Expert Comment

by:mouatts
ID: 10714755
OK first to prove to your self that it is working: create a page on the server that looks like the one below and point you browser to it.

<html><BODY>
<TABLE border="1">
<%
for each field in request.servervariables
response.write( "<TR><TH align=left valign=top>"&field&"</TH><TD valign=top>"&request.servervariables(field)&"&nbsp;</TD></TR>")
next
%>
</TABLE>
</body>
<HTML>

If you have been authenticated then the variable LOGON_USER will have you username in it.

Next to prove it to someone else go to a PC and turn off the 'Automatic Login in Intranet Zone' and reboot the PC. When you connect to the site you should be prompted for the username and password.

Alternatively if it is possible to log off your domain, for example by creating a local account and then accessing your server by IP address, you again should be prompted for the username and password.

HTH
Steve
0
 
LVL 2

Author Comment

by:khurram007
ID: 10722163
Can u tell me how to turn off the 'Automatic Login in Intranet Zone' ???

Khurram
0
 
LVL 11

Accepted Solution

by:
mouatts earned 500 total points
ID: 10725106
Within internet explorer go to Tools, Internet Options, click the security tab, then custom level and the option is near the bottom of the list.

Steve
0
 
LVL 2

Author Comment

by:khurram007
ID: 10747406
Nice Job Mouatts...

Keep it up!!!

Here r ur 500 globes...

Khurram
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Grab data from remote page 10 61
toggle checkboxes when a checkbox is checked 16 52
API works for 1 result, need to make it many 30 68
is this a cms? 8 36
Have you ever needed to get an ASP script to wait for a while? I have, just to let something else happen. Or in my case, to allow other stuff to happen while I was murdering my MySQL database with an update. The Original Issue This was written…
I was asked about the differences between classic ASP and ASP.NET, so let me put them down here, for reference: Let's make the introductions... Classic ASP was launched by Microsoft in 1998 and dynamically generate web pages upon user interact…
This Micro Tutorial will teach you how to censor certain areas of your screen. The example in this video will show a little boy's face being blurred. This will be demonstrated using Adobe Premiere Pro CS6.
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now