Groups | Blog | Home
all groups > asp.net security > july 2006 >

asp.net security : Disable NT Windows Login for asp.net



ntuyen01 NO[at]SPAM yahoo.com
7/28/2006 8:12:54 AM
Hi All,

I create an intranet web application using asp.net 2.0.
I set the authentication mode="Windows" in the web.config, and set IIS
as NT Authentication and uncheck the anonymous login box.

If I run on my local machine, the NT Windows dialog box login will not
popup, but I still get the "Domain/UserName",. Now I put that web
application on the production server then the NT Windows Login dialog
box will popup to ask the users for their username and password. Is
there a way to disable this box to popup, but I still get the
Domain/UserName.

I read some article, it tell me to set the "Domain/UserName" or
Domain/Group user in the production server where the application run,
then the NT Windows Login dialog box will not popup. Is that true? If
it is true, then how do I set that up.

Please help.

Thanks
ntuyen01 NO[at]SPAM yahoo.com
7/28/2006 9:30:43 AM
Thanks for the reply.
I am understand what you mean, but that mean each user has to change
his/her own IE Seccurity (Internet or Local Intranet) browser. I do
not want to do that, beasue a lot of users are scare to change his/her
Seccurity (Internet or Local Intranet) browser.
Are there other ways I can code or change on my side so that the user
does not has to involved in.

Thanks.

Regards,
Ted Lee


[quoted text, click to view]
Michael D'Angelo
7/28/2006 4:48:56 PM
You can do this by accessing the site via the server name only (without the
domain name.) Any site accessed this way is considered an intranet site.

E.g.
Use this
http://webserver
Instead of:
http://webserver.example.com

This of course will only work for computers whose primary suffix is the same
domain. (This is the default for any machine joined to the AD domain in
question.)

[quoted text, click to view]

Henning Krause [MVP - Exchange]
7/28/2006 5:22:24 PM
Hello,

for the Internet Explorer, you can control this on the clients - the default
setting is "Automatic logon only in intranet zone". Either add your server
url into the Intranet zone (recommended) or enable the automatic logon for
other zones.

Best regards,
Henning Krause


[quoted text, click to view]
Henning Krause [MVP - Exchange]
7/28/2006 7:24:17 PM
Hello,

that is the only option. But AFAIK, you can propagate these settings through
Group Policy.

Best regards,
Henning Krause

[quoted text, click to view]
ntuyen01 NO[at]SPAM yahoo.com
7/31/2006 6:17:31 AM
Hi,

What does it mean AFAIK? (Sorry to ask) and Would you please tell me
how do I set it through Group Policy.
Thanks in advance.

Ted Lee.


[quoted text, click to view]
Henning Krause [MVP - Exchange]
8/1/2006 12:00:00 AM
Hello,

you should find some information on this here:
http://help.lockergnome.com/windows2/Site-Zone-Assignment-List-ftopict420459.html

Best regards,
Henning

[quoted text, click to view]
AddThis Social Bookmark Button