Securing a website with Active Directory..?

[Tokhra]

Hi all,

I've got a development contract and they've asked me to use active directory for security.. I don't even know what this is, talk about secure a directory with it.

I've tried googl'ing it but don't get much info. Can anyone point me to a link or tell me how to secure a website on IIS with active directory?

Thanks,

Matt.

 

[quell]

hmmm need a little more info here. What are they trying to secure?
If your securing a web site then you can download

http://www.microsoft.com/windows2000/downloads/recommended/iislockdown/default.asp

Also read up on this.

http://www.microsoft.com/technet/tr...l=/technet/security/tools/chklist/iis5chk.asp

 

[pollux0]

it seems that using AD would make a site less secure.

 

[Tokhra]

quell: thanks for the links. Sorry I meant to mention that it was a website, I need to use active directory for security, meaning loging in and out of users using active directory..

Any info on that? Thanks for the help so far.

pollux0: well I don't know alot (anything) about active directory, im not in a position to start questioning their security - so I'll just supply them with that they asked for, that way I can't be blamed for anything, hehe

 

[quell]

If I understand correctly you’re basically wanting to use Active Directory for authentication into a web site? If so, this is easy. Go to IIS manager, Select the server> right click on the site and go to properties. Under the directory security tab>click on edit button by anonymous access and authentication control. In this box select the Intergraded windows authentication box -nothing else. They will have to enter there LAN login name and password in order to get access to the web site.

Here is the link:

http://msdn.microsoft.com/library/d...ry/en-us/sysadmin/htm/cms_sa_au_user_nwmd.asp

 

[Tokhra]

Great thats very helpful - thankyou, One more question if you don't mind. Is it ADSI I script with to get what user the person visiting my website is currently logged in as on the windows system? I realise thats moving into programming so it might not be your area.

I appreciate your help so far though. Thanks very much.