<allow roles ...> does NOT work ???

[cmrchs]

Hi,

I can't make <allow roles...> to work in web.config

I'm logging on as 'Administrator' and try to access a site for which the IIS-authentication method is set to 'Integrated Windows' only

Following are the web.config-entries of the site :
<authentication mode="Windows" />
<authorization>
<allow users="MYDOMAIN\Administrator" />
<deny users="*" />
</authorization>

When I access the site : --> no problem
Authenticated user: MYDOMAIN\Administrator

but changing web.config as follows gives me an "Access Denied"
<authentication mode="Windows" />
<authorization>
<allow roles="MYDOMAIN\Administrators" />
<deny users="*" />
</authorization>

And I double-checked that Administrator is a member of the Administrators-group
I tried with other users-roles and every time I allow only access to roles doesn't I have access ??
How come ?

Any ideas ?
thanks
Chris


**********************************************************************
Sent via Fuzzy Software @ http://www.fuzzysoftware.com/
Comprehensive, categorised, searchable collection of links to ASP & ASP.NET resources...

 

[Brock Allen]

If you use BUILTIN\Administrators then it will check against the local machine's
groups (which Domain Admins should be a part of).

 

[cmrchs]

Hi,

Great !!
BUILTIN\Administrators works

but why doesn't MYDOMAIN\Administrators work ?
it's what the docs/samples always say.

Chris

**********************************************************************
Sent via Fuzzy Software @ http://www.fuzzysoftware.com/
Comprehensive, categorised, searchable collection of links to ASP & ASP.NET resources...