IIS Authentication for static HTML pages











up vote
-1
down vote

favorite












I have an IIS site hosting a bunch of static HTML pages. I want access to these to be controlled via AD group membership, and in the event the user is not in the AD group, they should be redirected to an access denied page.



I have made some progress on this, and my web.config currently looks like this.



<?xml version="1.0" encoding="UTF-8"?>

<configuration>



    <system.webServer>

    <modules>

        <!-- Re-add auth modules (in their original order) to run for all static and dynamic requests -->

        <remove name="FormsAuthentication" />

        <add name="FormsAuthentication" type="System.Web.Security.FormsAuthenticationModule" />

        <remove name="DefaultAuthentication" />

        <add name="DefaultAuthentication" type="System.Web.Security.DefaultAuthenticationModule" />

        <remove name="RoleManager" />

        <add name="RoleManager" type="System.Web.Security.RoleManagerModule" />

        <remove name="UrlAuthorization" />

        <add name="UrlAuthorization" type="System.Web.Security.UrlAuthorizationModule" />

    </modules>

    </system.webServer>



<system.web>

        <authorization>

            <allow roles="AD GROUP NAME" />

            <deny users="*" />

        </authorization>

        <customErrors>

            <error redirect="access-denied.html" statusCode="401" />

        </customErrors>

</system.web>



    <location path="access-denied.html">

        <system.web>

            <authorization>

                <allow users="*" />    <!-- Allow all other users -->

            </authorization>

        </system.web>

    </location> 

    <location path="assets">

        <system.web>

            <authorization>

                <allow users="*" />    <!-- Allow all other users -->

            </authorization>

        </system.web>

    </location> 



</configuration>


This has locked the access to the pages down, and allows access to the access denied page, but it doesn't redirect unauthorised users to the access denied page, it prompts for credentials. Can anyone help me out with the redirect?






iis







share|improve this question






















  • I think you should enable your custom error section by putting <customErrors mode="On">, otherwise it would be ignored
    – LittleSweetSeas
    15 hours ago










  • @LittleSweetSeas thanks for the suggestion, although I just tried this and it hasn't made any difference.
    – Mark
    15 hours ago










  • Ok - so you may check Authentication settings for your site in IIS, ensuring to enable Windows Authentication.
    – LittleSweetSeas
    15 hours ago










  • @LittleSweetSeas I can confirm anonymous and windows authentication are both enabled. Windows has NTLM set as first provider.
    – Mark
    14 hours ago

















up vote
-1
down vote

favorite












I have an IIS site hosting a bunch of static HTML pages. I want access to these to be controlled via AD group membership, and in the event the user is not in the AD group, they should be redirected to an access denied page.



I have made some progress on this, and my web.config currently looks like this.



<?xml version="1.0" encoding="UTF-8"?>

<configuration>



    <system.webServer>

    <modules>

        <!-- Re-add auth modules (in their original order) to run for all static and dynamic requests -->

        <remove name="FormsAuthentication" />

        <add name="FormsAuthentication" type="System.Web.Security.FormsAuthenticationModule" />

        <remove name="DefaultAuthentication" />

        <add name="DefaultAuthentication" type="System.Web.Security.DefaultAuthenticationModule" />

        <remove name="RoleManager" />

        <add name="RoleManager" type="System.Web.Security.RoleManagerModule" />

        <remove name="UrlAuthorization" />

        <add name="UrlAuthorization" type="System.Web.Security.UrlAuthorizationModule" />

    </modules>

    </system.webServer>



<system.web>

        <authorization>

            <allow roles="AD GROUP NAME" />

            <deny users="*" />

        </authorization>

        <customErrors>

            <error redirect="access-denied.html" statusCode="401" />

        </customErrors>

</system.web>



    <location path="access-denied.html">

        <system.web>

            <authorization>

                <allow users="*" />    <!-- Allow all other users -->

            </authorization>

        </system.web>

    </location> 

    <location path="assets">

        <system.web>

            <authorization>

                <allow users="*" />    <!-- Allow all other users -->

            </authorization>

        </system.web>

    </location> 



</configuration>


This has locked the access to the pages down, and allows access to the access denied page, but it doesn't redirect unauthorised users to the access denied page, it prompts for credentials. Can anyone help me out with the redirect?






iis







share|improve this question






















  • I think you should enable your custom error section by putting <customErrors mode="On">, otherwise it would be ignored
    – LittleSweetSeas
    15 hours ago










  • @LittleSweetSeas thanks for the suggestion, although I just tried this and it hasn't made any difference.
    – Mark
    15 hours ago










  • Ok - so you may check Authentication settings for your site in IIS, ensuring to enable Windows Authentication.
    – LittleSweetSeas
    15 hours ago










  • @LittleSweetSeas I can confirm anonymous and windows authentication are both enabled. Windows has NTLM set as first provider.
    – Mark
    14 hours ago















up vote
-1
down vote

favorite









up vote
-1
down vote

favorite











I have an IIS site hosting a bunch of static HTML pages. I want access to these to be controlled via AD group membership, and in the event the user is not in the AD group, they should be redirected to an access denied page.



I have made some progress on this, and my web.config currently looks like this.



<?xml version="1.0" encoding="UTF-8"?>

<configuration>



    <system.webServer>

    <modules>

        <!-- Re-add auth modules (in their original order) to run for all static and dynamic requests -->

        <remove name="FormsAuthentication" />

        <add name="FormsAuthentication" type="System.Web.Security.FormsAuthenticationModule" />

        <remove name="DefaultAuthentication" />

        <add name="DefaultAuthentication" type="System.Web.Security.DefaultAuthenticationModule" />

        <remove name="RoleManager" />

        <add name="RoleManager" type="System.Web.Security.RoleManagerModule" />

        <remove name="UrlAuthorization" />

        <add name="UrlAuthorization" type="System.Web.Security.UrlAuthorizationModule" />

    </modules>

    </system.webServer>



<system.web>

        <authorization>

            <allow roles="AD GROUP NAME" />

            <deny users="*" />

        </authorization>

        <customErrors>

            <error redirect="access-denied.html" statusCode="401" />

        </customErrors>

</system.web>



    <location path="access-denied.html">

        <system.web>

            <authorization>

                <allow users="*" />    <!-- Allow all other users -->

            </authorization>

        </system.web>

    </location> 

    <location path="assets">

        <system.web>

            <authorization>

                <allow users="*" />    <!-- Allow all other users -->

            </authorization>

        </system.web>

    </location> 



</configuration>


This has locked the access to the pages down, and allows access to the access denied page, but it doesn't redirect unauthorised users to the access denied page, it prompts for credentials. Can anyone help me out with the redirect?






iis







share|improve this question













I have an IIS site hosting a bunch of static HTML pages. I want access to these to be controlled via AD group membership, and in the event the user is not in the AD group, they should be redirected to an access denied page.



I have made some progress on this, and my web.config currently looks like this.



<?xml version="1.0" encoding="UTF-8"?>

<configuration>



    <system.webServer>

    <modules>

        <!-- Re-add auth modules (in their original order) to run for all static and dynamic requests -->

        <remove name="FormsAuthentication" />

        <add name="FormsAuthentication" type="System.Web.Security.FormsAuthenticationModule" />

        <remove name="DefaultAuthentication" />

        <add name="DefaultAuthentication" type="System.Web.Security.DefaultAuthenticationModule" />

        <remove name="RoleManager" />

        <add name="RoleManager" type="System.Web.Security.RoleManagerModule" />

        <remove name="UrlAuthorization" />

        <add name="UrlAuthorization" type="System.Web.Security.UrlAuthorizationModule" />

    </modules>

    </system.webServer>



<system.web>

        <authorization>

            <allow roles="AD GROUP NAME" />

            <deny users="*" />

        </authorization>

        <customErrors>

            <error redirect="access-denied.html" statusCode="401" />

        </customErrors>

</system.web>



    <location path="access-denied.html">

        <system.web>

            <authorization>

                <allow users="*" />    <!-- Allow all other users -->

            </authorization>

        </system.web>

    </location> 

    <location path="assets">

        <system.web>

            <authorization>

                <allow users="*" />    <!-- Allow all other users -->

            </authorization>

        </system.web>

    </location> 



</configuration>


This has locked the access to the pages down, and allows access to the access denied page, but it doesn't redirect unauthorised users to the access denied page, it prompts for credentials. Can anyone help me out with the redirect?






iis




iis






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked 15 hours ago









Mark

3551520




3551520












  • I think you should enable your custom error section by putting <customErrors mode="On">, otherwise it would be ignored
    – LittleSweetSeas
    15 hours ago










  • @LittleSweetSeas thanks for the suggestion, although I just tried this and it hasn't made any difference.
    – Mark
    15 hours ago










  • Ok - so you may check Authentication settings for your site in IIS, ensuring to enable Windows Authentication.
    – LittleSweetSeas
    15 hours ago










  • @LittleSweetSeas I can confirm anonymous and windows authentication are both enabled. Windows has NTLM set as first provider.
    – Mark
    14 hours ago




















  • I think you should enable your custom error section by putting <customErrors mode="On">, otherwise it would be ignored
    – LittleSweetSeas
    15 hours ago










  • @LittleSweetSeas thanks for the suggestion, although I just tried this and it hasn't made any difference.
    – Mark
    15 hours ago










  • Ok - so you may check Authentication settings for your site in IIS, ensuring to enable Windows Authentication.
    – LittleSweetSeas
    15 hours ago










  • @LittleSweetSeas I can confirm anonymous and windows authentication are both enabled. Windows has NTLM set as first provider.
    – Mark
    14 hours ago


















I think you should enable your custom error section by putting <customErrors mode="On">, otherwise it would be ignored
– LittleSweetSeas
15 hours ago




I think you should enable your custom error section by putting <customErrors mode="On">, otherwise it would be ignored
– LittleSweetSeas
15 hours ago












@LittleSweetSeas thanks for the suggestion, although I just tried this and it hasn't made any difference.
– Mark
15 hours ago




@LittleSweetSeas thanks for the suggestion, although I just tried this and it hasn't made any difference.
– Mark
15 hours ago












Ok - so you may check Authentication settings for your site in IIS, ensuring to enable Windows Authentication.
– LittleSweetSeas
15 hours ago




Ok - so you may check Authentication settings for your site in IIS, ensuring to enable Windows Authentication.
– LittleSweetSeas
15 hours ago












@LittleSweetSeas I can confirm anonymous and windows authentication are both enabled. Windows has NTLM set as first provider.
– Mark
14 hours ago






@LittleSweetSeas I can confirm anonymous and windows authentication are both enabled. Windows has NTLM set as first provider.
– Mark
14 hours ago



















active

oldest

votes











Your Answer






StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});














 

draft saved


draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53371908%2fiis-authentication-for-static-html-pages%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown






























active

oldest

votes













active

oldest

votes









active

oldest

votes






active

oldest

votes
















 

draft saved


draft discarded



















































 


draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53371908%2fiis-authentication-for-static-html-pages%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

Can a sorcerer learn a 5th-level spell early by creating spell slots using the Font of Magic feature?

Image
28 6 $begingroup$ Per the Font of Magic feature, sorcerer can use Flexible Casting to create 5th-level spell slots at level 7, even though they are not typically available until level 9. You can transform unexpended sorcery points into one spell slot as a bonus action on your turn. The Creating Spell Slots table shows the cost of creating a spell slot of [5th level is 7] If such a sorcerer levels up while still having this 5th-level spell slot, can they choose a 5th-level spell as the spell they gain upon levelling up? The Spellcasting feature states: Additionally, when you gain a level in this class, you can choose one of the sorcerer spells you know and replace it with another spell from the sorcerer spell list, which also must be of a level for which you have spell slots.
Read more

Does disintegrating a polymorphed enemy still kill it after the 2018 errata?

Image
up vote 13 down vote favorite 1 After the 2018 errata, the disintegrate spell description now reads: A creature targeted by this spell must make a Dexterity saving throw. On a failed save, the target takes 10d6 + 40 force damage. The target is disintegrated if this damage leaves it with 0 hit points. If you were to polymorph an enemy into a rat and then disintegrate it, would the enemy be disintegrated or would it just return to its original form? I know that for Druids, it’s not an instant kill anymore, but is this the case for polymorph as well? dnd-5e spells polymorph errata share | improve this question edited 18 hours ago
Read more

A Topological Invariant for $pi_3(U(n))$

Image
3 3 $begingroup$ Recently, I saw a construction of topological invariant for $pi_3(U(n))$ with $ngeq 2$ : $$ N=frac{1}{24pi^2}int_{S^3} d^3x epsilon^{ijk} Tr[(U^{-1}partial_{x_i}U)(U^{-1}partial_{x_j}U)(U^{-1}partial_{x_k}U)] , $$ where $Uin U(n)$ depends on $boldsymbol{x}=(x_1,x_2,x_3)in S^3$ , $epsilon^{ijk}$ is the Levi-Civita symbol, $i,j,k=1,2,3$ , and the duplicated indexes are summed over. It is claimed that $N$ is an integer, but why? Update 02/02/2019 I think I got an argument for $n=2$ . In this case, $U=e^{i varphi} q$ with $qin SU(2)$ . Due to the trace and the Levi-Civita symbol in $N$ , $varphi$ does not contribute to $N$ . As $Tr[q^{dagger}partial_i q]=0$ and $(q^{dagger}partial_i q)^{dagger}=-q^{dagger}partial_i q$ , $q^{dagger}partial_i q$ in geneeral has the form $q^{dagger}partia
Read more