Windows Forum

Ask something
Discussion Locked

IIS security

0 helpful
5 replies

by cray

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have a website (host.domain.com, NOT the root web) that I want people to be able to connect to internally without typing in a password. But, I also want it secure so that people from the outside can't access it without NTFS credentials. I have NT security enabled in the IIS permissions and the domain users have access via the folder's NTFS permissions, but I still get prompted for the login credentials regardless of whether or not we are connecting through the internal network.

5 replies

by acattr

From what I have been able to gather it does not work with virtual sites that use host header names. You can test this by setting authentication to basic and NT challenge/response on the default website. And you will see that users will go right in on the network, and from the internet they are prompted for a login.

by acattr

Also just in case that didnt help. You are required to use IE if you want to use NT authentication. Netscape does not support it. That is why basic authentication is also set.

PS: Relating to first answer. Microsoft does not recommend putting Host header names on the default site if you use proxy and/or exchange. So I imagine your not using them on the default site.

This discussion is closed to new replies.