Integrated Authentication and Active Directory

[Pictor]

Hi all,

I have a portal with the Windows Integrated Authentication enabled.

Is this enough to recognize the user on the domain and make so the
access be secure and authenticated?

Cause I developed also a script that run a query on the Active
Directory to find the user in the domain, corresponding to the
Server.Servervariables("AUTH_USER").
Is it necessary or the Integrated Authentication do sufficient security
checks to let the user surf the portal only if he belong to the domain?

Thank you for the clarifications

Pictor

 

[Paul Bergson [MVP-DS]]

This should work as long as anonymous access and basic authentication isn't
enabled and you have NTFS permissions setup to secure access to your web
folders.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.