Home/ Questions/Q 8441789
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-10T08:39:35+00:00

I have been using the code below in web.config as a simple way to

  • 0

I have been using the code below in web.config as a simple way to secure asp.net files for an admin site for several domain users. I’d like to be able to use this simple method to secure classic asp and other files on IIS 7.5. That way I could use XCOPY type deployment instead of having to set permissions on NTFS or in IIS.

The asp.net version is 4.0 and the App Pool is running in 32 bit mode. I post this question since I have done a decent amount of research and found little information this topic in IIS 7.5.

This web.config code secures asp.net files, but what is the best practice to secure the other files?

<system.web>
  <authorization>
    <allow users="domain\user1,domain\user2"/>
    <deny users="*"/>
  </authorization>
</system.web>
Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    AFAIK there is no similar mechanism for asp classic (no web.config htacesss list etc)
    but there are workarounds as described in this StackOverflow post .htaccess or .htpasswd equivalent on IIS?.

    • 0