IIS Directory Security

directory security iis protection

[Signum]

I need to protect a directory on a windows 2000 server running IIS.

I wish to force users to login to view anything within the directory using windows authentication. This is OK so far, however this means that I will need to use all the accounts that are already set on the server.

What I would like to do is use the windows security but keep access permission in a db or text file. Much like the linux htaccess.

If anyone can help it would be much appreciated.

[Receptional Andy]

AFAIK, if you use windows security, you can't easily control this from an external database, and you probably wouldn't want to, as this could affect your OS user account's security. It's probably possible though.

Much better to use a traditional script/database system, probably ASP and SQL/Access DB if you're running IIS. There are plenty available (try hotscripts.com)

Windows authentication is a bit of a pain if you need to use lots of different user accounts, and the admin side of things is much easier using script based method.