« Previous Next »

Thread: password protect directory

Last post 04-30-2009 12:58 PM by bshedenhelm. 5 replies.

Average Rating Rate It (5)

RSS

Page 1 of 1 (6 items)

Sort Posts:

  • 04-30-2009, 12:00 PM

    password protect directory

    I am trying to password protect a directory using IIS-6.  I have unchecked anonymous access for the site and I have added my domain group that i want to have access to the root directory of the site.  Here is the problem.  IIS prompts me to log in if i use the fully qualified name but not if i use just the site name.  example: in IE type intranet will go to site using anonymous login but type intranet.example.com and get prompted to login.  This only happens with internet explorer, if i try it with firefox or chrome it will prompt me everytime to login.

    Im pretty new to IIS, any ideas?

  • 04-30-2009, 12:08 PM In reply to

    Re: password protect directory

    IE will pass credentials for site it believes are in the intranet zone.  Add your site/domain to IE's intranet zone in security and it will stop asking and just use the logged in users domain account.

    Jeff

    Look for Wrox's new book Professional IIS 7 in your local bookstore, or order now at Amazon.com
  • 04-30-2009, 12:21 PM In reply to

    Re: password protect directory

    Thanks for the quick reponse!

    Actually, I want to be prompted to login.  We are trying to develop an intranet that will have sensitive documents listed on it.

    It acts as if the site name (intranet) has already been added to my local intranet sites in IE.

  • 04-30-2009, 12:27 PM In reply to

    • tomkmvp
    • Top 10 Contributor
    • Joined on 03-20-2003, 10:27 AM
    • Central NJ
    • Posts 6,238
    • IIS MVPs

    Re: password protect directory

    bshedenhelm:
    example: in IE type intranet will go to site using anonymous login

    That's not true.  Jeff explained why this happens.  You can confirm by checking the IIS log file and you should see that the username is getting logged.

    Why must it prompt for credentials?  Windows Integrated is designed not to prompt the user.  if you absolutely must have the site prompt for credentials then switch to basic authentication.

  • 04-30-2009, 12:37 PM In reply to

    Re: password protect directory

    jeff@zina.com:

    IE will pass credentials for site it believes are in the intranet zone.  Add your site/domain to IE's intranet zone in security and it will stop asking and just use the logged in users domain account.

    Jeff

    You are definitely on to something though.  If i uncheck Automatically detect intranet network and uncheck Include all local (intranet) sites not listed in other zones I am prompted to login.

     

  • 04-30-2009, 12:58 PM In reply to

    Re: password protect directory

    Jeff and Tom, you guys are exactly right.  I wasn't seeing the big picture.  The reason it wasn't prompting me was because it was carrying my login that I was already logged into the domain with.  That account also has read permission on the directory.  I tryed it from a computer loged in with a local account and, bingo, it prompted me.  EXACTLY what I am trying to accomplish!

    Thanks for your help.

Page 1 of 1 (6 items)
Microsoft Communities