Hi everyone, I'm new to this forum and look forward to learning more about IIS and it's members. I have a IIS 7 security problem ( at least I think it is a security issue) that have been trying to solve and create a virtual directory, yet unsuccessful!! I'm hoping to find the solution with...

Problem: a specific Global Security Group can not load ASP pages (but can load HTML pages). Goal: allow access to the secure website files and directories according to Global Group membership. This is a medical industry customer, so HIPAA compliance is mandatory (i.e. file access and restrictions must...

Hi Everyone, I'm trying to secure a Shared Hosting Environment on a Windows 2003 Server / IIS 6 My approche so far: 1) created an Application Pool User for each of the Site (all members of the IIS_WPG Group) 2) created an Application Pool for each Site and assigned them to the Sites 3) assigned the...

Hi. I would like to ask whether it is possible to enable both Integrated Windows Authentication and at the same time requiring a client certificate to access a site. The idea behind this is to be able to access the Logon prompt of Integrated Authentication only if the user has a valid certificate. I...