Allow configuring Windows Authentication to still require entering a password
Perhaps a web.config setting already allows one to require user passwords even with Windows Authentication. This is a requirement at a bio-pharma manufacturer. We have fiddled with IIS settings such as specifying Kerberos with some success but without consistency. Can these web.config settings handle this now or can something to comply with this requirement be added?
1
vote
PEGS
shared this idea
-
Peter Groft
commented
Right-click your application's virtual directory, and then click Properties. Click the Directory Security tab. Under Anonymous access and authentication control, click Edit. Make sure the Anonymous access check box is not selected and that Integrated Windows > authentication is the only selected check box.
Greetings,
Peter