Article ID: 222028
Article Last Modified on 11/21/2006
APPLIES TO
- Microsoft Internet Information Services 5.0
This article was previously published under Q222028
SUMMARY
Digest Authentication is new to Windows 2000 and Internet Information Services 5.0. This form of authentication encrypts the user's password information, and provides a mechanism for aiding in the prevention of some common server attacks (such as a replay attack).
In order to use Digest Authentication in Windows 2000, the server must have access to an Active Directory Server that is set up for Digest Authentication. For information, please refer to the following IIS documentation:
If the server running IIS is not a Active Directory Server, or does not have access to the Active Directory, this authentication will not work. For more information about making the server a Directory Server, see the Windows 2000 documentation.
If the server is already a Directory Server, perform the following steps:
- Open the Active Directory Users and Computers.
- Open the domain that you want to administer.
- Double-click the user name that you want to use with Digest Authentication.
- In Account Options, select Store password using reversible encryption.
- Click OK.
- Reset the user's password now in order for the encryption to take place. To reset the user's password, right-click the user name in the directory and click Reset Password.
- Click OK.
In order for Internet Information Services 5.0 to use Digest Authentication, you must select it in Internet Service Manager. To do this, perform the following steps:
- Open Internet Services Manager.
- Expand the Web server that you want to make the change in, and then open the Web site's properties.
- Click the Directory Security tab.
- Under Anonymous Access and Authentication Control, click Edit.
- Select Digest Authentication from the list, and then click OK.
MORE INFORMATION
For more information about Digest Authentication, see RFC2069, or the IETF (Internet Engineering Task Force) document found at the following Web address:
Additional query words: iis
Keywords: kbinfo KB222028
