ClickOnce Outside form a restricted Web site

[Guest]

We have an application that we distribute internally, with in our domain. We
would like to distribute it to a select group of users that will log into a
Web site. I find very little information on using the ClickOnce technology
when on needs to log into the publishing URL.
Has any one tried this?
Where can I find information on ClickOnce needing to logging into a Web
site?
Thank you,

 

[Linda Liu [MSFT]]

Hi Mike,

If you want to control which deployments each user can access, you should
not allow anonymous access to ClickOnce applications deployed on a Web
server. Rather, you would allow users access to the deployments you have
installed based on a user's identity (using Windows NT authentication).

If you deploy to an environment without Windows NT authentication, a
possible solution could be to attempt using ASP.NET form-based
authentication to authenticate the user.

However, ClickOnce does not support forms-based authentication because it
uses persistent cookies; these present a security risk because they reside
in the Internet Explorer cache and can be hacked. Therefore, if you are
deploying ClickOnce applications, any authentication scenario besides
Windows NT authentication is unsupported.

You can enable Windows Authentication for the web site of the ClickOnce
application using IIS manager.

Hope this helps.
If you have any question, please feel free to let me know.

Sincerely,
Linda Liu
Microsoft Online Community Support

==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.