Directory Security Property Sheet

Use the options in the Directory Security property sheet to restrict access to individual newsgroups or to sets of newsgroups on the basis of user name or to restrict access to all newsgroups on the basis of the client computer IP address.

For more information on how to control access to newsgroups, see Configuring Security.

The Directory Security property sheet contains the following options:

Option Description

Password Authentication Method Choose Edit to view these options. You can choose one or more of the Authentication options.

Allow Anonymous Unrestricted user access to newsgroups that do not have permissions set on their directories. User names and passwords are not required.

Basic Authentication If permissions are set on the directory containing a newsgroup, the user is required to provide a valid Windows NT user name and password that is authorized for access to that directory. The user name and password are sent as unencrypted clear text across the network.

Windows NT Challenge/Response If permissions are set on the directory containing a newsgroup and the client software supports this protocol, the user name and password are encrypted and sent to Microsoft NNTP Server. The user name and password must be authorized for access to the requested newsgroup directory. Microsoft Internet Mail and News supports this protocol.

Enable SSL Client Authentication Enables secure client authentication using SSL encryption and certificates. A server SSL certificate is required.

Require SSL Client Authentication Authentication that requires clients to provide an encrypted user name and password using SSL.

Enable Client Certificate Mapping to Windows NT User Accounts If the client software has an SSL client certificate installed, use the Windows NT account mapped to that certificate to authenticate the user. Choose Client Mappings to enter certificates and Windows NT account names.

TCP/IP Access Restrictions The specific IP addresses that are allowed or not allowed access to this news site. By default, all IP addresses are granted access.

Granted Access When selected, all IP addresses except those listed are allowed access to this news site.

Denied Access When selected, no IP addresses are allowed access to this news site except those listed.

Type The type of address that is being added.

IP Address The IP address for a single computer that is being added. Choose DNS Lookup to look up the IP address on the basis of the DNS name of the computer.

Network ID The base IP address for a group of computers that is being added. A Subnet Mask is required.

Subnet Mask The subnet mask that specifies the range of IP addresses for a group of computers that is being added. See Microsoft Windows NT Server Networking Guide for more information on subnet masks.

Domain Name The domain name of a group of IP addresses that is being added.

Option	Description
Password Authentication Method	Choose Edit to view these options. You can choose one or more of the Authentication options.
Allow Anonymous	Unrestricted user access to newsgroups that do not have permissions set on their directories. User names and passwords are not required.
Basic Authentication	If permissions are set on the directory containing a newsgroup, the user is required to provide a valid Windows NT user name and password that is authorized for access to that directory. The user name and password are sent as unencrypted clear text across the network.
Windows NT Challenge/Response	If permissions are set on the directory containing a newsgroup and the client software supports this protocol, the user name and password are encrypted and sent to Microsoft NNTP Server. The user name and password must be authorized for access to the requested newsgroup directory. Microsoft Internet Mail and News supports this protocol.
Enable SSL Client Authentication	Enables secure client authentication using SSL encryption and certificates. A server SSL certificate is required.
Require SSL Client Authentication	Authentication that requires clients to provide an encrypted user name and password using SSL.
Enable Client Certificate Mapping to Windows NT User Accounts	If the client software has an SSL client certificate installed, use the Windows NT account mapped to that certificate to authenticate the user. Choose Client Mappings to enter certificates and Windows NT account names.
TCP/IP Access Restrictions	The specific IP addresses that are allowed or not allowed access to this news site. By default, all IP addresses are granted access.
Granted Access	When selected, all IP addresses except those listed are allowed access to this news site.
Denied Access	When selected, no IP addresses are allowed access to this news site except those listed.
Type	The type of address that is being added.
IP Address	The IP address for a single computer that is being added. Choose DNS Lookup to look up the IP address on the basis of the DNS name of the computer.
Network ID	The base IP address for a group of computers that is being added. A Subnet Mask is required.
Subnet Mask	The subnet mask that specifies the range of IP addresses for a group of computers that is being added. See Microsoft Windows NT Server Networking Guide for more information on subnet masks.
Domain Name	The domain name of a group of IP addresses that is being added.