Ahh, got it going now.  I had set NTFS permissions but neglected to take
into account some transitive permissions. :)  Thanks for your help.

-----Original Message-----
From: Nichols, Brandon [mailto:BNichols@N...] 
Sent: Friday, August 02, 2002 9:10 AM
To: Security_asp
Subject: [security_asp] RE: Integrated Windows authentication (IIS 5)

Use NTFS permissions on the files to control access. If you want to make the
individual links to pages dependant upon the user then you will have to code
some asp and use the HasAccess method

-----Original Message-----
From: Patrick Mair [mailto:pmair@e...]
Sent: Friday, August 02, 2002 9:59 AM
To: Security_asp
Subject: [security_asp] RE: Integrated Windows authentication (IIS 5)


Just to follow this up -- I want to be able to let certain authenticated
users acces certain files, not all authenticated users.

-----Original Message-----
From: Patrick Mair [mailto:pmair@e...] 
Sent: Friday, August 02, 2002 8:42 AM
To: Security_asp
Subject: [security_asp] RE: Integrated Windows authentication (IIS 5)

Thanks Andreas,

I've gone into my browser and added my intranet site to Intranet sites, and
turned on Automatic login only in Intranet zone.

On IIS I've set directory security to Integrated Windows authentication.

The part that I'm missing is where I set individual file and directory
permissions...

Patrick

-----Original Message-----
From: Andreas Pettersson [mailto:andreas@q...] 
Sent: Thursday, August 01, 2002 11:59 PM
To: Security_asp
Subject: [security_asp] RE: Integrated Windows authentication (IIS 5)

Haven't found any really useful source for this except ASPToday and
various books, though you should be able to find something at the
following sites:

www.4guysfromrolla.com
www.15seconds.com
www.learnasp.com/learnasp/

But to quickly test IWA, don't forget the security settings in IE on the
client. It's not that hard to set up but there is a lot of pitfalls...

/andreas.q3p

>Could someone recommend some sites with information and tutorials about
how
>to setup Integrated Windows authentication with respect to intranet
>authentication?  I use a custom solution right now, authenticating to a
>standalone security database.  We're running active directory and I'd
like
>to authenticate to those user accounts instead.