Security

Re: password protect directory

bshedenhelm — Thu, 30 Apr 2009 16:58:15 GMT

Jeff and Tom, you guys are exactly right. I wasn't seeing the big picture. The reason it wasn't prompting me was because it was carrying my login that I was already logged into the domain with. That account also has read permission on the directory. I tryed it from a computer loged in with a local account and, bingo, it prompted me. EXACTLY what I am trying to accomplish!

Thanks for your help.

Re: password protect directory

bshedenhelm — Thu, 30 Apr 2009 16:37:59 GMT

jeff@zina.com:

IE will pass credentials for site it believes are in the intranet zone. Add your site/domain to IE's intranet zone in security and it will stop asking and just use the logged in users domain account.

Jeff

You are definitely on to something though. If i uncheck Automatically detect intranet network and uncheck Include all local (intranet) sites not listed in other zones I am prompted to login.

Re: password protect directory

tomkmvp — Thu, 30 Apr 2009 16:27:19 GMT

bshedenhelm:
example: in IE type intranet will go to site using anonymous login

That's not true. Jeff explained why this happens. You can confirm by checking the IIS log file and you should see that the username is getting logged.

Why must it prompt for credentials? Windows Integrated is designed not to prompt the user. if you absolutely must have the site prompt for credentials then switch to basic authentication.

Re: password protect directory

bshedenhelm — Thu, 30 Apr 2009 16:21:39 GMT

Thanks for the quick reponse!

Actually, I want to be prompted to login. We are trying to develop an intranet that will have sensitive documents listed on it.

It acts as if the site name (intranet) has already been added to my local intranet sites in IE.

Re: password protect directory

jeff@zina.com — Thu, 30 Apr 2009 16:08:03 GMT

IE will pass credentials for site it believes are in the intranet zone. Add your site/domain to IE's intranet zone in security and it will stop asking and just use the logged in users domain account.

Jeff

password protect directory

bshedenhelm — Thu, 30 Apr 2009 16:00:15 GMT

I am trying to password protect a directory using IIS-6. I have unchecked anonymous access for the site and I have added my domain group that i want to have access to the root directory of the site. Here is the problem. IIS prompts me to log in if i use the fully qualified name but not if i use just the site name. example: in IE type intranet will go to site using anonymous login but type intranet.example.com and get prompted to login. This only happens with internet explorer, if i try it with firefox or chrome it will prompt me everytime to login.

Im pretty new to IIS, any ideas?