<div>
Here you go. ;)<br />
<br />
<a href="http://support.microsoft.com/kb/320528" rel="ugc nofollow">http://support.microsoft.com/kb/320528</a><br />
<br />
An no it's not really an issue if you trust the source.
</div>


Here you go. ;)

http://support.microsoft.com/kb/320528 [http://support.microsoft.com/kb/320528]

An no it's not really an issue if you trust the source.

<div>
Thanks for you reply. &nbsp;However, I just want to give a 'specific' user minimum access. &nbsp;The article you supplied suggests that Anonymous queries weakens AD security -- and I would think it would. &nbsp;I'm on a college campus -- so our network isn't too private. <br />
Thanks.
</div>


Thanks for you reply.  However, I just want to give a 'specific' user minimum access.  The article you supplied suggests that Anonymous queries weakens AD security -- and I would think it would.  I'm on a college campus -- so our network isn't too private.
Thanks.

<div>
<div class="content wysiwyg-content">
A web developer in our organization wants to query our AD and authenicate users in a web app. &nbsp;What is the minimum permissions I can assign his account to accomplish this task? &nbsp;We have Windows 2003 SP2 -- will have Windows 2008 R2 soon. &nbsp;Is it recommended to allow web apps to authenicate against AD? &nbsp;Is this secure?<br />
<br />
Thanks
</div>
</div>


A web developer in our organization wants to query our AD and authenicate users in a web app.  What is the minimum permissions I can assign his account to accomplish this task?  We have Windows 2003 SP2 -- will have Windows 2008 R2 soon.  Is it recommended to allow web apps to authenicate against AD?  Is this secure?

Thanks

What Permission Are Needed to Query LDAP

Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).