ASP.net Web application admin... security

[Aussie Rules]

Hi,

The web site web application tool which allows you to manage users etc, has
to strong a security requirement for me.

Is there a way i can change the setting on this.. having 7 characters with
one none alpa char is to strong...

Thanks

 

[ThePurpleCat]

Hi Aussie Rules,

I've been able to do this from IIS. Open up Control Panel. Navigate to
Administrative Tools.
Click on Internet Information Services. Navigate to your virtual
directory and right click properties. In the property dialog that
appears you should find a tab labeled ASP.NET. Click the "Edit
Configuration ...". button. Click on the Authentication tab. You
should see that Forms authentication is selected and that the
authentication provider you selected for your site is visible in the
Membership Provider Class box. Click on Manage Providers. In the box
that appears you should be able to find all the parameters for
configuring authentication including minimum password length, etc. I
think you'll have to restart IIS after setting these.

Hope this helps,

Purple

 

[Walter Wang [MSFT]]

Hi Aussie,

This is because ASP.NET is picking configuration from
c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\CONFIG\machine.config, you
can find following settings:

<system.web>
<processModel autoConfig="true" />
<httpHandlers />
<membership>
<providers>
<add name="AspNetSqlMembershipProvider"
type="System.Web.Security.SqlMembershipProvider, System.Web,
Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"
connectionStringName="LocalSqlServer" enablePasswordRetrieval="false"
enablePasswordReset="true" requiresQuestionAndAnswer="true"
applicationName="/" requiresUniqueEmail="false" passwordFormat="Hashed"
maxInvalidPasswordAttempts="5" minRequiredPasswordLength="7"
minRequiredNonalphanumericCharacters="1" passwordAttemptWindow="10"
passwordStrengthRegularExpression="" />
</providers>
</membership>


You can copy this to your web.config and change accordingly:

<membership>
<providers>
<remove name="AspNetSqlMembershipProvider" />
<add name="AspNetSqlMembershipProvider"
type="System.Web.Security.SqlMembershipProvider, System.Web,
Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"
connectionStringName="LocalSqlServer" enablePasswordRetrieval="false"
enablePasswordReset="true" requiresQuestionAndAnswer="true"
applicationName="/" requiresUniqueEmail="false" passwordFormat="Hashed"
maxInvalidPasswordAttempts="5" minRequiredPasswordLength="3"
minRequiredNonalphanumericCharacters="1" passwordAttemptWindow="10"
passwordStrengthRegularExpression="" />
</providers>
</membership>

Please let me know whether or not this answers your question. Thank you.

Sincerely,
Walter Wang ([email protected], remove 'online.')
Microsoft Online Community Support

==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications. If you are using Outlook Express, please make sure you clear the
check box "Tools/Options/Read: Get 300 headers at a time" to see your reply
promptly.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.