Thread: Blocking Anonymous Access During Development

I want to block anonymous access to a website through IIS 7 and force the network logon box to pop up when someone tries to access the site.

I can disable it in Authentication but it just says I do not have sufficient credentials to access it with no network logon box.

Is it possible to do this in IIS 7? And if so, how?

Originally Posted by Rebelle

Hi RR,

I'm not sure...but where you unchecked anonymous did you check Integrated windows?

I couldn't see an option for that in IE7 Belle....

IE7 wouldn't have that option, RR. It would be in IIS. What browser are you using to view the site? If it's FireFox, you need to tweak it to handle Windows authentication, I believe.

Originally Posted by jmurrayhead

IE7 wouldn't have that option, RR. It would be in IIS. What browser are you using to view the site? If it's FireFox, you need to tweak it to handle Windows authentication, I believe.

Whoops....I meant IIS 7....

I assumed that if I created a user on the web server and then removed anonymous access, then a network popup box would appear to enter the username and password to access the site.

Does that make sense?

I think that if the domain (*.abc.com) or something similar is added to the Trusted Sites section in Internet Options, it will prevent the authentication box from showing and automatically login using network credentials.

Originally Posted by jmurrayhead

I think that if the domain (*.abc.com) or something similar is added to the Trusted Sites section in Internet Options, it will prevent the authentication box from showing and automatically login using network credentials.

Sorry you've lost me slightly there J....

Basically what I want is to prevent the site coming up when someone browses to it, but instead use windows authentication so you have to enter valid user details to be able to view the site....

I'm not entirely sure where the Trusted Site comes into it....The site is not in my trusted site list, but no logon box appears if I disable Anonymous Access in IIS...

I'm not sure if what I'm trying to do is possible in IIS. I know my hosts use seperate IIS password software to restrict access, but wondered if it was possible through IIS.

Does that make sense?

Just to reiterate, you have "Integrated Windows Authentication" checked and Anonymous Access disabled, correct?

Originally Posted by jmurrayhead

Just to reiterate, you have "Integrated Windows Authentication" checked and Anonymous Access disabled, correct?

I'm not entirely sure where I should be looking....

In IIS7 I click on the particular site and the go into IIS Authentication. This gives a table showing:-

Code:

Name                                       State           Response Type
Anonymous Authentication          Enabled
ASP.NET Impersonation              Disabled
Forms Authentication                 Enabled         HTTP 302 Login/Redirect

If I disable Anonymous Authentication then I can't access the site. It says my credentials do not match...

I don't see Windows Authentication anywhere...

Check out this link: IIS7 - Integrated Windows Authentication