Basic Authentication User Accounts -- iis security

Larry C.
11/6/2004 2:38:04 PM

Ken,

Thanks, sounds good.
Larry C.

[quoted text, click to view]

Ken Schaefer
11/6/2004 6:53:10 PM

Hi,

a) To require a user to type in a username/password, you can just disable
"Allow anonymous access" in the IIS Manager, and check "Basic
Authentication"

b) To create users (and groups) you can use the Computer Management MMC
located in the Administrative Tools folder

c) Probably the best way would be to create a group that has access to the
site, then create individual user accounts, and put them into the group.
Locate the folders/files for the website on your hard disk, and remove
permissions for Everyone, and add permissions for the group in question.
This means that users will need to authenticate -and- only users in the
group that you created can access the content (other users, who do have a
valid username/password on the system, will not be able to access the
content)

Cheers
Ken

[quoted text, click to view]

Elga
12/10/2004 9:53:01 AM

Hi, Ken.

I did everything like you described in your post, and the user has to enter
his password when he opens my site by typing the URL, but if he goes to
another site, and ther return to mine by clicking in the browser buttons, the
password is not requested anymore.

What can I do to avoid this ?

Thanks,

Elga.

[quoted text, click to view]

John
12/14/2004 5:23:07 PM

This is a browser issue, not a web server issue. You need to modify your
web page design. See -

http://www.htmlgoodies.com/beyond/nocache.html

John

[quoted text, click to view]

Ken Schaefer
1/5/2005 11:36:28 AM

John is correct that it's a browser issue. It is not a "caching" issue like
the page below outlines.

The browser will continue to send the same credentials to the server that
were successful last time until the browser is closed -or- the server says
that those credentials are unacceptable (and the user is prompted to use
alternate credentials).

That's the way it IE works. Suggest you get your users to close their
browser windows.

Cheers
Ken

[quoted text, click to view]

Got something to say? Click here to post a reply to this thread.

Don't see what you're looking for? Try a search.

View other messages about iis security

iis security : Basic Authentication User Accounts