Set User Authentication on the HTTP Exchange Virtual Server

The HTTP Exchange Virtual Server is the default Web site provided by IIS. You can find this virtual server in System Manager by choosing Servers, then Protocols, then HTTP. You cannot manage this virtual server from System Manager. It must be administered from the IIS snap-in. All other HTTP virtual servers can be managed from System Manager. In the IIS snap-in, the HTTP Exchange Virtual Server appears as Default Web Site.

To set user authentication on the HTTP Exchange Virtual Server:

1. Start Internet Services Manager
   On the Start menu, point to Programs, point to Administrative Tools, and then click Internet Services Manager.
2. Navigate to the HTTP Exchange Virtual Server (listed as Default Web Site in IIS).

   Internet Information Services

   1. Server name
   2. Default Web Site
3. Right-click Default Web Site, and then click Properties.
4. On the Directory Security tab, under Anonymous access and authentication control, click Edit.
5. In the Authentication Methods dialog box, select one or more of the following authentication methods:
   • Anonymous access. This method logs a user onto the server with an anonymous or guest account.
   • Basic authentication. This method requires the user to provide a valid Windows user name and password, and passwords are transmitted across the network unencrypted. To configure the server to use a default logon domain other than the local domain, click Edit, and type the domain name.
   • Digest authentication for Windows domain servers. This method is the same as basic authentication, but it uses a challenge and response mechanism to authenticate the user to the server without sending passwords to the server.
   • Integrated Windows authentication. This option retrieves the user's password from the user's browser. The password is sent encrypted to the server. The user's name and password are not transmitted.

Related Topics