Windows Authentication

[Burning]

I changed my web.config file to this:

 

<authentication mode="Windows" />

 

Now how can i see if the person logged on belongs to

the domain. And how should I give users Rights?

This system is for an Intranet. :confused:

 

Any help would be appreciated...

 

Regards

James

[fadi]

u should check ur users and give permissions by code, security is a big subject a .net and u can find as much as u want on this issue on the net

[PlausiblyDamp]

if user.Identity.IsAuthenticated=True Then
    'User has been authenticated
end if

If User.IsInRole("Domain name\domain users") = True Then
   'user probably is in domain.
End If

 

Could you be a bit clearer on what you mean by 'give users Rights' ? In code you could check for group membership and act based on that.

Alternatively you could allow or deny access through the web.config.

 

If you have MSDN installed the following should work - if not search on MSDN website for web.config and authorization

 

http://ms-help://MS.VSCC.2003/MS.MSDNQTR.2003APR.1033/cpgenref/html/gngrfdeny.htm

http://ms-help://MS.VSCC.2003/MS.MSDNQTR.2003APR.1033/cpgenref/html/gngrfallow.htm

[Burning]

Thanx PlausiblyDamp...

That's all i needed... I'll figure it out from here...

 

"Could you be a bit clearer on what you mean by 'give users Rights' ?"

 

It's a Internal Corporate Website where i only

want the Directors to be able to use the Site.

 

Thanx again.