NT user validation & NTFS folder's security

[arlequin]

Hi there!

I am building an intranet for the company I work for and I wanna put hyperlinks in some pages that should access to .doc or .xls files allocated on several machines thru the LAN....

But I wanna catch the username of the user that is navigating to allow or not the access to those documents.

On the other hand I wanna know wheter is possible or not to pick up from IExplorer a Word or Excel file that is NOT under the

http://wwwroot

folder at the web server (Always thinking in "intranet" )
Arlequín
arlequin@montevideo.com.uy

http://www.arlequinadas.com

 

[culshaja]

If you are using NT security on your server then all of this will be taken care of. On an Intranet you requests to the server go via your NT credentials if you have NT Challenge and response set on the web site. This will then use your standard Domain Level permissions on files on the server, i.e. if yo don'ty have the correct security for that file, then you can't view it. Just make sure that the IUSR_MachineName and EveryOne group does not have Read permission.

James James Culshaw
jculshaw@active-data-solutions.co.uk

http://www.active-data-solutions.co.uk

http://www.brainbench.com/transcript.jsp?pid=193305

 

[arlequin]

Thanks...

but..

what is "NT Challenge" ? Arlequín
arlequin@montevideo.com.uy

http://www.arlequinadas.com

 

[culshaja]

NT Challenge and Response is were a login box appears as NT issues a 'challenge' and expects a 'response'. It uses NT security.

James James Culshaw
jculshaw@active-data-solutions.co.uk

http://www.active-data-solutions.co.uk

http://www.brainbench.com/transcript.jsp?pid=193305

 

[dwilkinson]

arlequin didn't tell us which webserver he is running. Since James seems to assume IIS, I will clarify based on that.

Within IIS you can control permissions of many objects (folders, Virtual Directories). Within the Internet Service Manager (Microsoft Management Console, aka MMC), get Properties, go to the Directory Security tab and click on the "Edit" button within the "Anonymous Access and Authentication Control" section.

Anonymous Access defaults to using the generic "IUSR_NETBIOSNAME" login that is setup when you install IIS.

Windows NT Challenge/Response uses your NT file and directory security permissions on the file system where the files are located. When a file is requested, the user gets the popup authentication dialog demanding credentials.

Hope this helps.

 

[culshaja]

Sorry, so used to people using ASP using IIS4 or IIS5. Keep forgetting that you can use other web servers with third party versions of ASP. Doh!!!

James James Culshaw
jculshaw@active-data-solutions.co.uk

http://www.active-data-solutions.co.uk

http://www.brainbench.com/transcript.jsp?pid=193305

 

[arlequin]

I am sorry, I should have told that I am running an IIS

Thanx a lot, both of you, boys

Arlequín
arlequin@montevideo.com.uy

http://www.arlequinadas.com