Apply windows security to all files in web app

[Dorte]

Hi,

I have set up windows authentication in the web.config file and authentication to allow only identified windows users. I have placed a datalink file (a udl-file) in a subfolder in the application directory, but web.config settings for the application does not seem to apply to this file. How can I set up windows authentication and authorization for all files in the web folder?

Thanks, Dorte

 

[John Sivilla]

The udl file is not subject to asp.net security because it is not a file type which is mapped to the aspnet_isapi.dll. The security on the ACL in this case is checked by IIS. If you don't have Windows Integration or Basic Security set up there, but instead anonyomous, give the IUSR_MachineName access to the file.

An alternative is to map the file type to the aspnet_isapi.dll, in which case, you would also have to set impersonation to true on top of setting authentication to windows.

hope this helps,