Authentication User

[Anonymous]

I read your article about Active Directory Integration In Three Hours Or Less, published on May 8, 2003. On your page 2, you mentioned about giving a minimal rights to this user for authenticate the AD database. I would like to know what NT permission I need to assign to this user. I am having trouble of authentication if the user does not have Admin right.

Thanks.

[Anonymous]

Thank you for your quick response.

If this authenticate user belongs to the Domain Users group, he can’t do authentication. If I assign him to the Domain Admins group, he can authenticate without any problems. Is that how you would assign permission? If you have any other ways of giving this user NT permission to do authentication, please let me know. I do not want to assign him in the Domain Admins group if I do not have to.

Thanks.

[Anonymous]

GOD NO!
Since this user will more than likely be used on many machiines and you probably are not using SSL to connect, this user’s credentials are going clear text over the wire. Anyone sniffing the network will have the keys the city!
By default all “authenticated users” have read permissions to the AD. I’d make a user just for this purpose and deny everything to him other than read. (i.e. logon locally, logon interactivly, etc…)

[Author]

Posts