Allow login to app using IIS only for some users

Susja 716 Reputation points
2020-09-12T02:17:50.65+00:00

I have an app, e.g. SL. It's running on Web Server using IIS.
SL has it's own authentication method.
I don't want that any user with SL account be able to login. I want only those accounts that have Windows Authentication.
My goal: 1. create account for SL for a few users 2. enable Windows Authentication in IIS 3. list those users in IIS
My expectation: only users listed in IIS will be able to login into SL
I don't want to change web.config directly.
Could I use the Authorization Rules option: (see attachment)24222-authorization-rules.png

Thanks

Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,775 questions
0 comments

7 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Dave Patrick 426.4K Reputation points MVP
    2020-09-13T01:50:07.263+00:00

    Glad to here it was helpful.

    --please don't forget to Accept as answer if the reply is helpful--

    0 comments
  2. Susja 716 Reputation points
    2020-09-16T02:15:39.01+00:00

    I wanted to add 'allow' and 'deny' Rules for Authorization but I don't see it on my Windows 2016 IIS 10.0
    I do see it in Windows 2012 IIS 7.5.
    How could I set Rules in IIS 10.0 ?

    Thanks,

    0 comments