How to setup an Intranet web application using IIS 7 on wind 2008 R2 server?

lapucca
lapucca used Ask the Experts™
on
Hi, this site comes up (has ssl) https://ourdomain.xxx.yyy   no problem.
i want to limit it first by setting it for just users on our network.  I did the following:
1.  in IIS Authentication I disabled the Anonymous Authentication and Enabled the Windows Authentication.
2.  In IIS Authorization, I deleted the "Allow all users" and added "Deny Anonymous users"

Now, I''m on our network still, in the browser I type in https://ourdomain.xxx.yyy  and now I'm getting page is not direction because it's trying to navigate to a form authentication.  i don't want that.  I just want Windows Authentication.  How should I set this up?  thank you.

Oh, I forgot to mention, this web server hosts many web sites and most of them are public site.  This web site that I'm setting up would need to be constrained with only access to users on our domain and a couple of other partners' users which I plan t use "IP Address and Domain Restriction" in IIS.  How should I configure for this type of access?  Thank you.

https://ourdomain.xxx.yyy/Account/Login?ReturnUrl=%2FAccount%2FLogin%3FReturnUrl%3D%252FAccount%252FLogin%253FReturnUrl%253D%25252FAccount%25252FLogin%25253FReturnUrl%25253D%2525252FAccount%2525252FLogin%2525253FReturnUrl%2525253D%252525252FAccount%252525252FLogin%252525253FReturnUrl%252525253D%25252525252FAccount%25252525252FLogin%25252525253FReturnUrl%25252525253D%2525252525252FAccount%2525252525252FLogin%2525252525253FReturnUrl%2525252525253D%252525252525252FAccount%252525252525252FLogin%252525252525253FReturnUrl%252525252525253D%25252525252525252FAccount%25252525252525252FLogin%25252525252525253FReturnUrl%25252525252525253D%2525252525252525252FAccount%2525252525252525252FLogin%2525252525252525253FReturnUrl%2525252525252525253D%252525252525252525252FAccount%252525252525252525252FLogin%252525252525252525253FReturnUrl%252525252525252525253D%25252525252525252525252FAccount%25252525252525252525252FLogin%25252525252525252525253FReturnUrl%25252525252525252525253D%2525252525252525252525252FAccount%2525252525252525252525252FLogin%2525252525252525252525253FReturnUrl%2525252525252525252525253D%252525252525252525252525252FAccount%252525252525252525252525252FLogin%252525252525252525252525253FReturnUrl%252525252525252525252525253D%25252525252525252525252525252FAccount%25252525252525252525252525252FLogin%25252525252525252525252525253FReturnUrl%25252525252525252525252525253D%2525252525252525252525252525252FAccount%2525252525252525252525252525252FLogin%2525252525252525252525252525253FReturnUrl%2525252525252525252525252525253D%252525252525252525252525252525252FAccount%252525252525252525252525252525252FLogin%252525252525252525252525252525253FReturnUrl%252525252525252525252525252525253D%25252525252525252525252525252525252FAccount%25252525252525252525252525252525252FLogin%25252525252525252525252525252525253FReturnUrl%25252525252525252525252525252525253D%2525252525252525252525252525252525252FAccount%2525252525252525252525252525252525252FLogin%2525252525252525252525252525252525253FReturnUrl%2525252525252525252525252525252525253D%252525252525252525252525252525252525252F
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Top Expert 2016
Commented:
put it back to defaults and just use ip address restrictions
https://technet.microsoft.com/en-us/library/cc730889.aspxip address restrictions

Author

Commented:
Thanks David for the help.

Question, the image you posted is not what I see when I try to setup IP range in IIS 7.  I'm attaching the screen capture image.

Is there a difference between internal ip ranges and external ip ranges?  I got one of the IP range as 128.125.xx.0/24  and I wonder if this is internal ip range that won't work here.  This is given by a external partner user as one of their IP range.  I thought all ip strating with 128 is only for internal usage.

Also, with that IP range how to enter the 2 fields shown in the attached screen captured for "IP Range" and "Mask or Prefix"?

Thank you.
Top Expert 2016
Commented:
you forgot to attach the picture.
128.x.x.x are external
192.168.x.x / 172.16.x.x / 10.x.x.x are internal
Build an E-Commerce Site with Angular 5

Learn how to build an E-Commerce site with Angular 5, a JavaScript framework used by developers to build web, desktop, and mobile applications.

Author

Commented:
Oh, that's good to know, thank you for clarifying.  Sorry that i forgot to attach the screen capture.  Here it is.  What do I put in for the Mask field(2nd text field)?
Thank you.
IP-Ranges.jpg
Top Expert 2016
Commented:
range  (for my site which is 192.168.0.x ) I'd put 192.168.0.0 netmask 255.255.255.0

Author

Commented:
I get a list of IP ranges which comes as an IP address and ends in '/23' or /24 or 21...

I think I'm supposed to take that ending number and calculate a mask or subnet?  How to do that?  Thank you.
Top Expert 2016
Commented:
192.168.0.0/24 is 255.255.255.0 start 192.168.0.0-> 192.168.0.255  (256 addresses)
192.168.0.0/21 is 255.255.248.0 start 192.168.0.0 -> 192.168.7.255  (2048 addresses)

Nice Calculator http://www.ipaddressguide.com/cidr

Author

Commented:
This is awesome!  Thank you David for all your help and your patience.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial