IIS Integrated Authentication

[fallb06]

Here's what happened. We had two servers, both domain controllers. One server had iis 6.0. We have one page on our website where we only want current students (I work at a high school) to have access so we enabled Integrated Authentication in IIS on that one page.

Time passed and we got another server. We set up the new server as a domain controller and uninstalled the domain controller service from the web server.

Now, when students try to access the protected page, they are prompted to authenticate to the web server (i.e. Servername) instead of being asked to authenticate to the domain.

Other things to know....Our web server was a web server only before it was a DC. When you install AD, all local user accounts are wiped out. Currently, the anonymous user account is a domain user account.

I will be enternally grateful for any advice.

 

[jshurst]

Can you log onto the webserver using an AD account(meaning is the new DC working correctly)? Also, what about DNS on the web server, is it still set to resolve to itself?

Also, I assume that you're using asp.net? If so make sure you have the following:

<authentication mode="Windows"/> 
<identity impersonate="true" />

And disable anonymous access in IIS

 

[fallb06]

I can log onto the domain. DNS isn't on that server, it is on another, but it does point to the correct place. You are correct, I am using ASP.NET but in the config file I'm using forms. Actually, on this particular part of the web site, it is all html (it's the public part) and just uses anonymous access. Thanks for the effort hurst, I appreciate it greatly.