RE: IIS Security using Integrated Windows Authentication

Ghost wrote:

> I have a site hosted on IIS that I want to use
> Integrated Windows Authentication to authenticate
> users before they can access the site. But I do not
> want everyone that has valid logon credentials to be
> able to access the site. Only a few users. How can I achieve this?

  The simplest thing to do is to 1) host your IIS content files on an NTFS-formatted partition (instead of FAT) and 2) set the filesystem ACLs appropriately so that only users who are members of a particular group have access to read the files and directory contents. If you're running user accounts in the context of Active Directory then you'd create the group and add the users there. If you're using a single server in workgroup mode then you would need to create the group(s) locally to the server.

  -bws Received on Mon Feb 3 13:42:51 2003