> Does anybody know if there is a way using IIS(Server 2000) 
> and IE(5.5-6.0) to always require a user to authenticate 
> themselves when they access certain web sites/applications.  
> In other words, do not allow IE/IIS to authenticate a user 
> behind the scenes using credentials provided when the client 
> machine was logged into.  

Well, first, whether or not IE automatically passes your Windows username
and password to IIS is an IE setting. The only thing you have control over
on the IIS side is how to perform authentication, if at all, and which
accounts will allow access to which resources.

So, all you have to do is deny access to those files for the accounts with
which people are logging into their workstations, and allow access to those
files for other accounts.

> While still having the user name and password encrypted thus 
> ruling out "Basic authentication" which passes these values 
> in clear text.  

There's no reason you can't continue to use Windows authentication to
support your IE users (and Mozilla users for that matter) using the
information above.

> "Digest authentication for Windows domain servers" has also been 
> ruled out, since apparently that requires the web server to 
> also be a domain controller and our operations managers have 
> said that is not going to happen.

I don't think that's correct. Digest authentication with IIS requires the
IIS server to be a member of an Active Directory domain:

http://support.microsoft.com/kb/q222028/

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized 
instruction at our training centers in Washington DC, Atlanta, 
Chicago, Baltimore, Northern Virginia, or on-site at your location. 
Visit http://training.figleaf.com/ for more information!


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Find out how CFTicket can increase your company's customer support 
efficiency by 100%
http://www.houseoffusion.com/banners/view.cfm?bannerid=49

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:193159
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to