Restrict access to an intranet site to a specific group of users

Question

I have an ASP.NET site running in IIS7 on a local intranet. I want to restrict access to this site to a specific group of users. I think I should be able to do this by using Windows Authentication within IIS, but I'm having trouble.

I've enabled the Windows Authentication feature of IIS, and I've enabled Windows Authentication on my site in inetmgr. I set authentication in the web.config for my site:

<authentication mode="Windows" />

From what I've read, this should be all I need to do... but nothing seems to happen. I tried restricting access by using directory security within windows, and was able to deny access to all users by removing read access on the directory. But I wasn't then able to restore access to the specific users required. It feels like IIS doesn't know who the user requesting the page is, as though it never actually did any authentication.

Am I missing something?

Forgive me for asking the obvious question, but you removed the anonymous user, right? — Katherine Villyard, Jan 29 '14 at 22:43
None of this is obvious to me... I disabled anonymous authentication for the site in IIS. Not sure if that's the same thing. — Mike, Jan 29 '14 at 22:45
possible duplicate of [Restrict access to IIS site to an AD Group](http://serverfault.com/questions/352647/restrict-access-to-iis-site-to-an-ad-group) — HopelessN00b, Jan 29 '14 at 22:51

score 1 · Answer 1 · answered Feb 04 '14 at 19:56

Can't comment - sorry.

Based on this "allow Element for authorization", you should be able to specify each users like a groups. I.E.

<configuration>
  <system.web>
    <authorization>
      <allow users="DOMAIN/robert.real, DOMAIN/silvia.dell" \>
      <deny users="*" \>
    </authorization>
  </system.web>
</configuration>

You might also want to make that only Windows Authentication is allowed.

score 0 · Answer 2 · answered Jun 23 '17 at 07:47

0

Open windows explorer on the server. Find the folder of the website and open properties. On the security tab remove all permissions and give read rights only to that domain group and it will work.

answered Jun 23 '17 at 07:47

Hüseyin Yağlı

151
4

Restrict access to an intranet site to a specific group of users

2 Answers2