Home/ Questions/Q 6600247
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-25T18:35:49+00:00

If I set Windows Authentication to true in IIS7 and set Anonymous Authentication to

  • 0

If I set Windows Authentication to true in IIS7 and set Anonymous Authentication to false, I will get a WWW-Authenticate header. I assume this is the cue to the browser to popup the authentication dialog. I’m trying to figure out where in the ASP.NET pipeline the WWW-Authenticate header gets set (and what class is responsible for setting it it). I’ve done quite a bit of Googling and looking at WindowsAuthenticationModule and UrlAuthorizationModule in reflector but can’t seem to pinpoint it!

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Several modules in IIS 7 perform tasks related to security in the request-processing pipeline. In addition, there are separate modules for each of the authentication schemes, which enable you to select modules for the types of authentication you want on your server.

    The one you are looking for is the WindowsAuthenticationModule, which performs NTLM integrated authentication. It is located in Inetsrv\Authsspi.dll.

    The picture below shows the HTTP request processing pipeline mechanism of IIS7.

    enter image description here

    For a complete in-depth elaboration, including the above material, visit: http://learn.iis.net/page.aspx/101/introduction-to-iis-7-architecture/

    That should answer all your questions 🙂

    • 0