Professional in C# and Visual Basic Part 105. Building on the revolutionary release, adds several key new developer features including AJAX, LINQ, and a new CSS designer in Visual Web Developer 2008. The dramatic reduction in code that developers realized from the more than 50 new server controls in now allows developers the time to make their applications more interactive with AJAX, to work with data in their preferred language with LINQ, and to build visually attractive and consistent standards-based sites with CSS. . | Chapter 21 Security As you can see a couple of methods are at your disposal for building an authentication authorization model for your applications. We start by examining the Windows mode of authentication. Windows-Based Authentication Windows-based authentication is handled between the Windows server where the application resides and the client machine. In a Windows-based authentication model the requests go directly to IIS to provide the authentication process. This type of authentication is quite useful in an intranet environment where you can let the server deal completely with the authentication process especially in environments where users are already logged onto a network. In this scenario you simply grab and utilize the credentials that are already in place for the authorization process. IIS first takes the user s credentials from the domain login. If this process fails IIS displays a pop-up dialog box so the user can enter or re-enter his login information. To set up your application to work with Windows-based authentication begin by creating some users and groups. Creating Users You use aspects of Windows-based authentication to allow specific users who have provided a domain login to access your application or parts of your application. Because it can use this type of authentication makes it quite easy to work with applications that are deployed in an intranet environment. If a user has logged onto a local computer as a domain user he will not need to be authenticated again when accessing a network computer in that domain. The following steps show you how to create a user. It is important to note that you must have sufficient rights to be authorized to create users on a server. If you are authorized the steps to create users are as follows 1. Within your Windows XP or Windows Server 2003 server choose Start O Control Panel O Administrative Tools O Computer Management. If you are using Windows Vista choose Start O Control
