Home
Topics
Application and Platform Security
Web Security Tools and Best Practices
Web Application and Web 2.0 Threats
How to implement IIS authentication settings

How to implement IIS authentication settings

Joel Dubin, past SearchSecurity.com expert

I have installed a standalone IIS server on a Windows 2000 system. How can I switch off the authentication window that pops up on a remote computer when trying to access the page?

Requires Free Membership to View

Login

By submitting you agree to receive email communications from
TechTarget and its partners. Privacy Policy Terms of Use.

This depends on what you're trying to do. If you want to allow open access to a Web site hosted on your Internet Information Services (IIS), you'll need to check two settings on the server to see which is blocking the site.

There are two levels of authentication for an IIS server hosted on Windows 2000: Web authentication and New Technology File System (NTFS) permissions.

IIS authentication is set through the Internet Service Manager (ISM), which can be accessed from the server's Administrative Tools menu. Under the Directory Security tab, there are a variety of authentication options that can be checked off. These include options for Basic Authentication, Digest Authentication, as well as Integrated Windows Authentication.

The ISM allows more than one type of authentication to be selected. The pop-up window you describe could be a Basic or Digest authentication window, so make sure these two options are deselected.

The other reason for the authentication window issue could be that the NTFS permissions in the server's root directory may have been set to restrict access. This directory is usually located here: C:Inetpubwwwroot. If you want to remove any logon windows or have open access, go to this location and check the Everyone box; this will allow anyone to have free access to the directory.

From the perspective of the Windows 2000 machine itself, these Web server directories are just like any other directory on the server and can be configured separately.

More information:

Michael Cobb explains how to create access rules and configure IIS server permissions.

Using a different Web server? Learn some non-IIS best practices.

More News and Tutorials

Articles

Related glossary terms

Terms for Whatis.com - the technology online dictionary
- content filtering (information filtering)
- Web filter

This was first published in March 2007

Join the conversationComment

Share

Comments

Results

Contribute to the conversation

All fields are required. Comments will appear at the bottom of the article.

Back to top

More from Related TechTarget Sites

Cloud Security
Consumerization
Financial Security
SMB Security
Security AU
Security IN
Computer Weekly

Cloud Security
- AWS FedRAMP certification fast-tracks Amazon cloud for U.S. government
  
  AWS becomes the biggest cloud provider to earn FedRAMP certification, easing the transition to AWS for U.S. government agencies.
- For cloud backup and disaster recovery, bandwidth proves problematic
  
  When it comes to cloud backup and disaster recovery, organizations are holding back due to insufficient bandwidth and lengthy recovery times.
- Can self-managed cloud security controls ease enterprise concerns?
  
  Expert Dave Shackleford details how enterprises can increasingly manage their own cloud security controls with private virtual cloud offerings.
Consumerization
- Citrix XenMobile combines MDM, MAM, file-sharing for mobile management
  
  Citrix users say the company's unified enterprise mobility management product, XenMobile, may make it easier to deliver business applications to on-the-go users.
- Mobile adoption still lags behind vendor hype
  
  Mobility management is evolving by leaps and bounds, but some companies haven’t even put their mobile adoption plans in place.
- Using Microsoft Exchange ActiveSync for MDM: What you can and can't do
  
  Many companies use Microsoft Exchange ActiveSync to give users email access, but its limitations prevent it from being a full MDM tool.
searchFinancialSecurity
- PayPal CISO: Laws must foster better cybersecurity information sharing
  
  PayPal's Michael Barrett says many firms fear misuse of shared cybersecurity data. He also discusses the evolution of PCI DSS and mobile payment security.
- Cybergang plans to use Trojan against U.S. banks
  
  A cybergang in Eastern Europe revealed plans to attack U.S. banks with a Gozi-like Trojan, according to RSA.
- Improved Shylock Trojan targets banking users
  
  The latest variant of the banking Trojan is causing numerous problems, Symantec said.
searchMidmarketSecurity
- Windows Phone 7 security: Assessing WP7 security features
  
  Windows Phone 7 security features are proving to be a mixed bag. Sam Cattle assesses the enterprise security pros and cons of the latest Windows mobile platform.
- Choosing the best security certifications for your career
  
  Whether starting your career or planning your next step as an IT security professional, this tip will guide you toward the best certifications for your interests and experience.
- Midmarket security tutorials
  
  SearchMidmarketSecurity.com’s tutorials offer IT professionals in-depth lessons and technical advice on the hottest topics in the midmarket IT security industry. Through our tutorials we seek to provide site members with the foundational knowledge needed to deal with the increasingly challenging job of keeping their organizations secure.
searchSecurityAU
- Exploit kits evolved: How to defend against the latest attack toolkits
  
  Expert Nick Lewis details how automated exploit kits are evolving and offers mitigations for the latest methods employed by these attack toolkits.
- May 2013 Patch Tuesday fixes IE8 zero day; Adobe tightens ColdFusion
  
  The software giant's May 2013 Patch Tuesday update permanently fixes the IE8 zero-day flaw found in the Dept. of Labor website attack.
- Can self-managed cloud security controls ease enterprise concerns?
  
  Expert Dave Shackleford details how enterprises can increasingly manage their own cloud security controls with private virtual cloud offerings.
Information Security
- BYOD: Securing the risk to access the cost benefits
  
  Bring-your-own-device schemes offer businesses the opportunity to cut the costs and improve user experiences, but benefits can be dwarfed by the risks.
- A CIO's five-point plan for managing endpoint security
  
  Niel Nickolaisen offers a five-point solution for managing endpoint security for the hyper-connected enterprise -- starting with data governance.
- Microsoft offers 'fix' for latest Internet Explorer zero day
  
  Microsoft released a temporary fix to mitigate attacks using the most recent Internet Explorer 8 zero day vulnerability.
Computer Weekly
- Bolton and Wigan get PSN in £47m outsourcing deal
  
  Bolton and Wigan councils have signed a seven-year £47m outsourcing contract, which will deliver a ‘PSN ready’ network to the region.
- SAP’s Sikka takes innovation lead as SuccessFactors founder departs
  
  SAP has announced a leadership reshuffle in line with its agenda of in-memory database Hana, cloud and mobile. Sikka steps up, SuccessFactors’ Dalgaard steps down
- BT and Intel invest in lab to research into future cities and telecoms technologies
  
  A research laboratory has been launched by BT and Intel to develop networking technologies and smart city capabilities.

All Rights Reserved,Copyright 2000 - 2013, TechTarget