Using IIS with Active Directory (General Question)

[carmo]

This a general question...so here it goes. I have an IIS web server that I use for a corporate intranet. On another server I have Active Directory for all employees in the company. I would like to secure certain sections of the intranet (running on IIS) using basic or client authentication. How (in general) would I use Active Directory and IIS together to make this happen?? Thank you.

 

[Shift838]

First off you cannot secure a server using just basic authentication. Use NTLM, just tell IIS to use NTLM on the website, virtual directories or even files. You will also want to use the accounts domain as IIS default domain to try and authenticate against.

 

[Beboen]

Hi, hmmm, well actually you can secure it even when you use basic authentication. You can issue a certificate to the relevant IIS subdirectories/subtrees and then secure these directories to require authentication.

Although basic authentication is plain text, it's ok if you use certificates because then your data (and thus even the authentication part in this issue) is encrypted by the certificate.

Hth,
Beboen