Security for the Intranet

<% If InStr(Request.ServerVariables("HTTP_USER-AGENT"), "MSIE") Then MachPath = "../mm/iisctr1m.asp" Else MachPath = "iimmnscp.htm" End If %>
Goal
To provide a Web page that members of your airline's Frequent Flyers club can use to see how many points they have accumulated, find out what trips they might be able to buy with those points, and place reservations for those trips.
Components
Windows NT Server 4.0; Internet Information Server (IIS) 4.0; Active Server Pages (ASP); ADO; Microsoft SQL Server; Internet Explorer version 3.02 with Authenticode 2 update, or later versions of Internet Explorer
Environment
Intranet, secured; Windows NT network

Introductory video

Multimedia Demonstration

Basic Process

  1. Establish Windows NT Challenge/Response authentication for an application;
  2. Create the group to whom you want to grant access.
  3. Assign the Log on Locally privilege to this group.
  4. Change permissions to only the group created above (remove the group "Everyone").

Result

When a member of this group attempts to use this application, they are able to—without having to type in a password. When a user that is not a member of this group attempts to use this application, they receive an error message.

© 1997 by Microsoft Corporation. All rights reserved.