Virtual Directory Security in IIS5.0

is there anything in the local security policy manager that could be causing this? just browsing through there i noticed the LAN Manager Authentication level. It is Set for Send LM & NTLM responses right now. Should it be something else?

http://technet.microsoft.com/en-us/library...867(WS.10).aspx

im not sure what to choose.

ahh i think i semi-solved it. went to IIS and changed the anonymous access section. Enabled basic authentication since im SSL it wont matter and disabled integrated windows authentication. now it will actually save the password in the box so i just hit ok instead of retyping it everytime. i really wanted it to not show the box at all but just clicking ok is much much better than before. if anyone knows which settings i need where it wont pop up the box at all after first login that would be great. it does it for any file you open.

ok another update. tested it on a few other machines and they dont get the popup screen at all. it must be something with my machine that requires that screen popup. so it looks like its fixed. if anyone has any comments on this let me know, im curious if what im doing is right or if it opens my security up.

You could try running Microsoft's Baseline Security Analyser and see if this shows you any misconfigurations you may have.

Topic closed, OBE.

 

Louis