"Troy S." <Troy S.@discussions.microsoft.com> wrote in message
news:1304088C-1CA6-407A-A334-1EBC733A0FFE@microsoft.com...
> Hello all. I am developing a 2.0 web site whereby the client wants to
> give
> access to everyone in their company's domain (I assume that means Active
> Directory). The site will be accessed from the Internet (outside the
> company' intranet). Once logged in, I will grab the authenticated user's
> identity and search SQL tables for their app-specific rights. I have
> wrestled with the proper settings to enable this functionality but have
> yet
> to stumble upon the correct solution.
>
> I would think Allow Anonymous Access would be turned off via IIS and
> web.config would have something similar to the folllowing in it:
>
> <authentication mode="Windows"/>
> <identity impersonate="true"/>
> <authorization>
> <allow roles="app-specific-role-name" />
> <deny users="*" />
> </authorization>
>
> I'd greatly appreciate any insight you have or even links to proper
> resources. Take care.
>
> Troy

> How do you want the auth to be done?

"Troy S." <TroyS@discussions.microsoft.com> wrote in message
news:9E2C31D1-D414-4AFA-945D-012086BA23E2@microsoft.com...
> Joe, thanks for your time and informative reply.
>
>> How do you want the auth to be done?
>
> I've always used Forms authentication in conjunction with my own SQL
> tables
> (Users, Roles, etc) so I'm not sure how to answer your question. I've
> never
> tried to utilize Active Directory for an internet application but I've had
> to
> maintain a few apps that do (code is ugly and monstrous, using third-party
> components).
>
> I've not yet seen an elegant way to make Windows prompt the user for their
> Windows un & pw and then allow them access to the site, which is the
> functionality I need (just like RDPing to my work machine from home--fill
> in
> my un & pw and I can then access all the network resources I normally have
> access to).
>
> I'm not sure about the domain controller. All I know at the moment is the
> client has an intranet with many machines connected to it and wants to
> host
> this new site on one of their machines, using existing Windows accounts
> for
> authentication.
>
> I will research the Active Directory membership provider and see where
> that
> leads me. Hopefully I find the veritable pot of gold.
>
> Take care.
>
> Troy
>

> ... Just enable Windows
> auth in IIS, disable anonymous and set ASP.NET to Windows auth mode. It
> just works. If the IIS box is domain-joined, it will authenticate against
> AD. There is no code to write.

> The question is still whether you want to use Windows auth or forms auth.
> If you choose to go with forms auth, the AD membership provider is the
> easiest solution.