RE: ActiveDirectory and user page Access

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Hongye,

Thanks for all your help on this topic. It is indeed a tough subject. I
thinkk I will know how to handle this the next time around. JUst of a couple
of question to clear my mind.

(1)When you say I do not have to use ActiveDirectory membership under
Integrated windows authentication, what made me to use it in the first place.
I was of the impression that you use it if you are accessing the AD as where
your data is stored. Would I have to use it I was using forms authentication
(2) When does one use SQl membership provider and what are the advantages
Please give me your thoughts and thanks again.

Alex

""Hongye Sun [MSFT]"" wrote:

Hi Alex,

You are right that it will be much easier by using Windows integrated
authentication in your scenario. In this way, all the users and roles data
are all from AD server or local machine. You don't need to do additional
work if you just want to reuse the data.

Here are the detailed steps to implement it:

1. Disable Anonymous access in IIS
Using the Internet Information Services MMC snap-in, edit the properties of
the Web site. Edit the Anonymous access and authentication control on the
Directory security tab. Clear the Anonymous access check box and select the
Integrated Windows Authentication check box.

2. In the Web.config file, enable Windows authentication and use
AspNetWindowsTokenRoleProvider.
----------------------------
<system.web>
...
<authentication mode="Windows"/>
<roleManager enabled="true"
defaultProvider="AspNetWindowsTokenRoleProvider" />
...
</system.web>
----------------------------

3. Configure access to pages and folders in web.config
----------------------------
<configuration>
<location path="memberPages">
<system.web>
<authorization>
<allow roles="BUILTIN\Administrators" />
<deny users="*" />
</authorization>
</system.web>
</location>
<!-- other configuration settings here -->
</configuration>
----------------------------
Here path can be folder or page path.
Roles can be BUILTIN user groups or Domain user groups like
"<Domain>\Administrators".

That's it. We don't need to use ActiveDirectoryMembershipProvider under
windows integrated authentication.

Have a nice day.

Regards,
Hongye Sun (hongyes@xxxxxxxxxxxxxxxxxxxx, remove 'online.')
Microsoft Online Community Support

Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
msdnmg@xxxxxxxxxxxxxx

This posting is provided "AS IS" with no warranties, and confers no rights.


.

Relevant Pages

  • strange authentication problem involving cluster
    ... I have encountered strange problem regarding authentication and ... We have an intranet web site with anonymous access, ... WINDOWS authentication part which they can access directly without ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Using IIS w/ASP .NET 2.0 Web Application Projects
    ... I've tried to explain to you the authentication mechanism as well as I can. ... When you're done, you'll see that, if you turn on Windows Authentication. ... I also know that the IIS documentation directly contradicts what you are saying. ... Integrated Windows Authentication overrides the Anonymous authentication default. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: file security/authentication
    ... that if ANONYMOUS access is turned off in IIS for an object and I ... authenticated using INTEGRATED WINDOWS AUTHENTICATION, ... credentials would be passed to the object prior to access. ... Integrated Authentication turned on. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Using IIS w/ASP .NET 2.0 Web Application Projects
    ... I've tried to explain to you the authentication mechanism as well as I can. ... When you're done, you'll see that, if you turn on Windows Authentication. ... ASP.NET has a *separate* authentication configuration which IIS doesn't interfere with. ... Integrated Windows Authentication overrides the Anonymous authentication default. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Windows Auth requires Anonymous access too...why?
    ... Anonymous access is tried first. ... > For clients outside domain, you will probably need to enable Basic ... > Authentication (and protect it with SSL or username/password will be sent ... >> required Integrated Windows Authentication, ...
    (microsoft.public.inetserver.iis.security)