Re: preventing external access to directory

From: Pedro Graca (hexkid_at_hotpop.com)
Date: 10/27/04 

Date: 27 Oct 2004 11:53:45 GMT

J C-W wrote:
[snip]
> but since Microsoft have
> prevented the use of username/password combinations within the URL in IE,
> this method is no longer viable.

<quote src="http://support.microsoft.com/kb/834489">

How to disable the new default behavior for handling user information in
HTTP or HTTPS URLs

To disable the new default behavior in Windows Explorer and Internet
Explorer, create iexplore.exe and explorer.exe DWORD values in one of
the following registry keys and set their value data to 0.

. For all users of the program, set the value in the following
      registry key:
      HKEY_LOCAL_MACHINE\Software\Microsoft\Internet
      Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE

. For the current user of the program only, set the value in the
      following registry key:
      HKEY_CURRENT_USER\Software\Microsoft\Internet
      Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE

</quote>

I haven't tested this.

> Can anyone suggest an alternative solution
> or a way around the http authentication problem?

Maybe cookies? as recommended by the site above? 

-- 
USENET would be a better place if everybody read:    | to  mail  me:  simply |
http://www.catb.org/~esr/faqs/smart-questions.html   | "reply" to this post, |
http://www.netmeister.org/news/learn2quote2.html     | *NO* MIME, plain text |
http://www.expita.com/nomime.html                    | and *NO* attachments. |

Relevant Pages

  • RE: Sending mail via RPC over HTTP
    ... Microsoft CSS Online Newsgroup Support ... Server. ... Sending mail via RPC over HTTP ...
    (microsoft.public.windows.server.sbs)
  • RE: Connection Settings for RPC over HTTP
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... Connection Settings for RPC over HTTP ...
    (microsoft.public.exchange.admin)
  • [Full-disclosure] HTTP over X.509 - Office 2007
    ... HTTP over X.509 - Microsoft Office 2007 ... Why this advisory has no CVE ID: ... assigned CVE IDs directly and promptly by Steve Christey of MITRE. ...
    (Full-Disclosure)
  • Re: RPC over HTTP
    ... Click Services tab and select Hide All Microsoft Services and Disable ... HTTP" option checked? ... Please collect the IIS log and IIS metabase for analyze: ... <Also we do not receive a Certificate error when we visit the OWA webpage. ...
    (microsoft.public.windows.server.sbs)
  • Re: RPC over HTTP
    ... Server 2003 Through HTTP ... Microsoft CSS Online Newsgroup Support ... Also we do not receive a Certificate error when we visit the OWA ...
    (microsoft.public.windows.server.sbs)