Authentication Options

For the WWW service, you can choose any or all of these Internet Service Manager authentication options in the Service Properties dialog box:

Allow Anonymous

When you select this box, the WWW service processes anonymous connections and uses the anonymous logon user name and password for these connections. When you clear this box, the WWW service rejects all anonymous connections. In this case, the WWW service uses the basic or Windows NT challenge/response authentication protocol to access the resource.

Basic (clear text)

When you select this box, the WWW service processes requests by using basic authentication.

Warning

This check box is cleared by default for security reasons. Basic authentication sends Windows NT Server user names and passwords across the network without encryption.

Windows NT Challenge/Response

This box is selected by default. It sets the WWW service to use the Windows NT challenge/response protocol to honor requests by clients to send user account information. This protocol uses encrypted passwords for secure transmission. Windows NT challenge/response authentication works only with version 2.0 and later of Internet Explorer for Windows NT and Windows 95. For more details on when the server automatically uses challenge/response, see the "WWW Service Security" section earlier in this chapter.

The FTP service options include:

Allow Anonymous Connections

When you select this box, the user enters the user name "Anonymous." The FTP service processes these connections for the Windows NT user account specified in the FTP Service Properties dialog box. When you clear this box, users must enter valid Windows NT user names and passwords to log on to the FTP service.

Allow only anonymous connections

When you select this box, the FTP service rejects user logons with a user name other than Anonymous.

Warning

The FTP service sends Windows NT Server user names and passwords across the network without encryption. For security, this box is cleared by default.

Gopher services

The Gopher service allows only anonymous connections.