Previous Next

Thread: User Authentication - Could IIS 7.0 resolve usernames from AD without being member of this AD

Last post 09-08-2008 12:21 PM by f_broeder. 4 replies.

Average Rating Rate It (5)

RSS

Page 1 of 1 (5 items)

Sort Posts:

  • 09-03-2008, 11:38 AM

    User Authentication - Could IIS 7.0 resolve usernames from AD without being member of this AD

    Hey Guys, we have a situation at a customer and do not know any further.

    1) When using windows authentication on a single machine, the username are resolved against the local machine user database.

    2) When using windows authentication on a single machine which is member of a domain, the usernames are resolved against the local machine user database AND the active directory

     Right?

     Question: Is it possible to resolve usernames against an active directory without joining the machine to the domain?

    Thanks for answers
    Regards
    Florian

     

  • 09-03-2008, 3:30 PM In reply to

    • anilr
    • Top 10 Contributor
    • Joined on 05-23-2006, 10:13 PM
    • Redmond, WA
    • Posts 1,223

    Re: User Authentication - Could IIS 7.0 resolve usernames from AD without being member of this AD

    No, this is not possible.

    Anil Ruia
    Senior Software Design Engineer
    IIS Core Server
  • 09-04-2008, 3:35 AM In reply to

    Re: User Authentication - Could IIS 7.0 resolve usernames from AD without being member of this AD

    Hey anilr,

    thanks for your answer. Could you provide me some links or hints why? As far as i know iis uses the windowsAuthenticationProvider for solving usernames against local store and / or AD user store...

    What is changed in Windows that windowsAuthenticationProvider could access the ad user database when the machine is added to the domain?

    Thanks again

    Florian

  • 09-04-2008, 1:14 PM In reply to

    • anilr
    • Top 10 Contributor
    • Joined on 05-23-2006, 10:13 PM
    • Redmond, WA
    • Posts 1,223

    Re: User Authentication - Could IIS 7.0 resolve usernames from AD without being member of this AD

    This contains reference for windows sspi

    Anil Ruia
    Senior Software Design Engineer
    IIS Core Server
  • 09-08-2008, 12:21 PM In reply to

    Re: User Authentication - Could IIS 7.0 resolve usernames from AD without being member of this AD

    Thank you again!

    Regards

    Florian

Page 1 of 1 (5 items)
Page view counter