Application Server IIS Authentication

[Matt_Bezanson]

Hi,

We use AD Enhanced authentication for our clients (Thick, Unity, App Enabler, Studio, Agenda, Minutes, etc.). I am interested in knowing if Anonymous Authentication for the AppServer Virtual Directory/Application should be enabled or disabled. Windows Authentication is enabled. I have tried disabling Anonymous Authentication and it works for the most part, but occasionally a user will get an error that their client (usually Unity) can't connect to the application server.

I want to ensure that our system is as secure as possible and would like to disable Anonymous Authentication for the Application Server if possible/recommended.

[Eric_Beavers]

Disable Anonymous is the common install method.

Leaving it enabled typically leads to an annoying popup where users will have to manually enter AD credentials every time they do almost anything in the clients.There are some cases, however, where it is used such as interactive login.

The Authentication MRG has more info.

Check out the section titled "Additional Setting for the Web Server" for the best summary of your options and configuration steps.

[Nayyar_Toqeer]

Hello,
We are recommended by Hyland during our Performance Assessment to not use default site and use Secure protocols (https).  I am looking for directions on how to create secure site on a defined folder (instead of default) folder.  I am not a Web Engineer therefore basics info would be much appreciated. 

Thanks

[Eric_Beavers]

Hi Nayyar, I recommend starting your learning with Microsoft's documentation @ https://docs.microsoft.com/en-us/iis/get-started/whats-new-in-iis-10-version-1709/new-features-intro...

You can also get more information from the primary site for IIS

https://www.iis.net/