简体   繁体   中英

IIS anonymous vs windows authentications

I'm trying to understand the IIS windows and anonymous authentications. is there any difference between below options,

  1. Anonymous
  2. Anonymous + windows

只要启用了匿名身份验证,IIS便会使用它,无论您配置了什么其他内容。

Anonymous authentication gives users access to the public areas of your Web or FTP site without prompting them for a username or password. By default, the IUSR account, which was introduced in IIS 7.0 and replaces the IIS 6.0 IUSR_computername account, is used to allow anonymous access

Windows authentication , Identifies and authorizes users on the server's user list. Access to resources on the server is then granted or denied on the user account's privileges. Windows authentication is best suited for intranet web applications. The advantage of Windows authentication is that the web application can use the exact same security that applies to your corporate network. username, passwords, and permissions are the same for network resources and web applications

If both anonymous and windows authentication is enabled in IIS, and if we don't have a deny entry or anonymous in the web config then the resources on the web server are accessed using anonymous authentication

The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM