How to setup an Intranet web application using IIS 7 on wind 2008 R2 server?

Hi, this site comes up (has ssl) https://ourdomain.xxx.yyy   no problem.
i want to limit it first by setting it for just users on our network.  I did the following:
1.  in IIS Authentication I disabled the Anonymous Authentication and Enabled the Windows Authentication.
2.  In IIS Authorization, I deleted the "Allow all users" and added "Deny Anonymous users"

Now, I''m on our network still, in the browser I type in https://ourdomain.xxx.yyy  and now I'm getting page is not direction because it's trying to navigate to a form authentication.  i don't want that.  I just want Windows Authentication.  How should I set this up?  thank you.

Oh, I forgot to mention, this web server hosts many web sites and most of them are public site.  This web site that I'm setting up would need to be constrained with only access to users on our domain and a couple of other partners' users which I plan t use "IP Address and Domain Restriction" in IIS.  How should I configure for this type of access?  Thank you.

https://ourdomain.xxx.yyy/Account/Login?ReturnUrl=%2FAccount%2FLogin%3FReturnUrl%3D%252FAccount%252FLogin%253FReturnUrl%253D%25252FAccount%25252FLogin%25253FReturnUrl%25253D%2525252FAccount%2525252FLogin%2525253FReturnUrl%2525253D%252525252FAccount%252525252FLogin%252525253FReturnUrl%252525253D%25252525252FAccount%25252525252FLogin%25252525253FReturnUrl%25252525253D%2525252525252FAccount%2525252525252FLogin%2525252525253FReturnUrl%2525252525253D%252525252525252FAccount%252525252525252FLogin%252525252525253FReturnUrl%252525252525253D%25252525252525252FAccount%25252525252525252FLogin%25252525252525253FReturnUrl%25252525252525253D%2525252525252525252FAccount%2525252525252525252FLogin%2525252525252525253FReturnUrl%2525252525252525253D%252525252525252525252FAccount%252525252525252525252FLogin%252525252525252525253FReturnUrl%252525252525252525253D%25252525252525252525252FAccount%25252525252525252525252FLogin%25252525252525252525253FReturnUrl%25252525252525252525253D%2525252525252525252525252FAccount%2525252525252525252525252FLogin%2525252525252525252525253FReturnUrl%2525252525252525252525253D%252525252525252525252525252FAccount%252525252525252525252525252FLogin%252525252525252525252525253FReturnUrl%252525252525252525252525253D%25252525252525252525252525252FAccount%25252525252525252525252525252FLogin%25252525252525252525252525253FReturnUrl%25252525252525252525252525253D%2525252525252525252525252525252FAccount%2525252525252525252525252525252FLogin%2525252525252525252525252525253FReturnUrl%2525252525252525252525252525253D%252525252525252525252525252525252FAccount%252525252525252525252525252525252FLogin%252525252525252525252525252525253FReturnUrl%252525252525252525252525252525253D%25252525252525252525252525252525252FAccount%25252525252525252525252525252525252FLogin%25252525252525252525252525252525253FReturnUrl%25252525252525252525252525252525253D%2525252525252525252525252525252525252FAccount%2525252525252525252525252525252525252FLogin%2525252525252525252525252525252525253FReturnUrl%2525252525252525252525252525252525253D%252525252525252525252525252525252525252F
lapuccaAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

David Johnson, CD, MVPOwnerCommented:
put it back to defaults and just use ip address restrictions
https://technet.microsoft.com/en-us/library/cc730889.aspxip address restrictions
0
lapuccaAuthor Commented:
Thanks David for the help.

Question, the image you posted is not what I see when I try to setup IP range in IIS 7.  I'm attaching the screen capture image.

Is there a difference between internal ip ranges and external ip ranges?  I got one of the IP range as 128.125.xx.0/24  and I wonder if this is internal ip range that won't work here.  This is given by a external partner user as one of their IP range.  I thought all ip strating with 128 is only for internal usage.

Also, with that IP range how to enter the 2 fields shown in the attached screen captured for "IP Range" and "Mask or Prefix"?

Thank you.
0
David Johnson, CD, MVPOwnerCommented:
you forgot to attach the picture.
128.x.x.x are external
192.168.x.x / 172.16.x.x / 10.x.x.x are internal
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

lapuccaAuthor Commented:
Oh, that's good to know, thank you for clarifying.  Sorry that i forgot to attach the screen capture.  Here it is.  What do I put in for the Mask field(2nd text field)?
Thank you.
IP-Ranges.jpg
0
David Johnson, CD, MVPOwnerCommented:
range  (for my site which is 192.168.0.x ) I'd put 192.168.0.0 netmask 255.255.255.0
0
lapuccaAuthor Commented:
I get a list of IP ranges which comes as an IP address and ends in '/23' or /24 or 21...

I think I'm supposed to take that ending number and calculate a mask or subnet?  How to do that?  Thank you.
0
David Johnson, CD, MVPOwnerCommented:
192.168.0.0/24 is 255.255.255.0 start 192.168.0.0-> 192.168.0.255  (256 addresses)
192.168.0.0/21 is 255.255.248.0 start 192.168.0.0 -> 192.168.7.255  (2048 addresses)

Nice Calculator http://www.ipaddressguide.com/cidr
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
lapuccaAuthor Commented:
This is awesome!  Thank you David for all your help and your patience.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft IIS Web Server

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.