Domain Account Access with anonymous access enabled

Hello IIS gurus,

Never mind the reason, but I need to configure a virtual directory with
anonymous access enabled (it's accesed by both domain users and non-domain
users in an intranet), but the users that do belong to the domain must access
the site with their domain account, instead of "IUSR_" (An
asp.net application needs to impersonate the domain users accounts, only when
it is in fact a domain users that is accessing the application).

I'm almost certain it's not posible but, just in case, I might just ask the
experts.

Is it posible?

Thank you in advance.

Re: Domain Account Access with anonymous access enabled

In general this is not possible.

You could create two virtual directories that point to the same content.
Enable anonymous on one, and IWA on the other. (Re)Direct the user to the
appropriate virtual directory based on whether they are an internal or
external user...

Cheers
Ken

--
My IIS Blog: www.adOpenStatic.com/cs/blogs/ken

"JavierBolivia" wrote in message
news:2ADDBE84-E80F-49AA-9C9A-BCD4FD444FAC@microsoft.com...
> Hello IIS gurus,
>
> Never mind the reason, but I need to configure a virtual directory with
> anonymous access enabled (it's accesed by both domain users and non-domain
> users in an intranet), but the users that do belong to the domain must
> access
> the site with their domain account, instead of "IUSR_" (An
> asp.net application needs to impersonate the domain users accounts, only
> when
> it is in fact a domain users that is accessing the application).
>
> I'm almost certain it's not posible but, just in case, I might just ask
> the
> experts.
>
> Is it posible?
>
> Thank you in advance.

Re: Domain Account Access with anonymous access enabled

Hi Ken, thank you for replying. Is there a way to do what you specified
(redirecting based on the nature of the user) in IIS, or what you meant was
to do it by writing code in the application to acomplish it? I've asked some
people about how to do it in IIS by haven't find out how.

Thank you again.
Javier

"Ken Schaefer" wrote:

> In general this is not possible.
>
> You could create two virtual directories that point to the same content.
> Enable anonymous on one, and IWA on the other. (Re)Direct the user to the
> appropriate virtual directory based on whether they are an internal or
> external user...
>
> Cheers
> Ken
>
> --
> My IIS Blog: www.adOpenStatic.com/cs/blogs/ken
>
> "JavierBolivia" wrote in message
> news:2ADDBE84-E80F-49AA-9C9A-BCD4FD444FAC@microsoft.com...
> > Hello IIS gurus,
> >
> > Never mind the reason, but I need to configure a virtual directory with
> > anonymous access enabled (it's accesed by both domain users and non-domain
> > users in an intranet), but the users that do belong to the domain must
> > access
> > the site with their domain account, instead of "IUSR_" (An
> > asp.net application needs to impersonate the domain users accounts, only
> > when
> > it is in fact a domain users that is accessing the application).
> >
> > I'm almost certain it's not posible but, just in case, I might just ask
> > the
> > experts.
> >
> > Is it posible?
> >
> > Thank you in advance.
>
>

Re: Domain Account Access with anonymous access enabled

Hi,

You need to tell us how you would identify these two types of users first
:-)

For example is there a range of IP addresses that internal users use, and
external users use different IP addresses? If so, a piece of code can do the
necessary redirection for you.

Cheers
Ken

"JavierBolivia" wrote in message
news:064951EF-C880-418A-8C7E-46526BAE3F68@microsoft.com...
> Hi Ken, thank you for replying. Is there a way to do what you specified
> (redirecting based on the nature of the user) in IIS, or what you meant
> was
> to do it by writing code in the application to acomplish it? I've asked
> some
> people about how to do it in IIS by haven't find out how.
>
> Thank you again.
> Javier
>
> "Ken Schaefer" wrote:
>
>> In general this is not possible.
>>
>> You could create two virtual directories that point to the same content.
>> Enable anonymous on one, and IWA on the other. (Re)Direct the user to the
>> appropriate virtual directory based on whether they are an internal or
>> external user...
>>
>> Cheers
>> Ken
>>
>> --
>> My IIS Blog: www.adOpenStatic.com/cs/blogs/ken
>>
>> "JavierBolivia" wrote in
>> message
>> news:2ADDBE84-E80F-49AA-9C9A-BCD4FD444FAC@microsoft.com...
>> > Hello IIS gurus,
>> >
>> > Never mind the reason, but I need to configure a virtual directory with
>> > anonymous access enabled (it's accesed by both domain users and
>> > non-domain
>> > users in an intranet), but the users that do belong to the domain must
>> > access
>> > the site with their domain account, instead of "IUSR_"
>> > (An
>> > asp.net application needs to impersonate the domain users accounts,
>> > only
>> > when
>> > it is in fact a domain users that is accessing the application).
>> >
>> > I'm almost certain it's not posible but, just in case, I might just ask
>> > the
>> > experts.
>> >
>> > Is it posible?
>> >
>> > Thank you in advance.
>>
>>