We have a small website that we post information to. There is an area that authentication is required which we simply use NTLM internally to allow users access to. We recently put the website accessible to the outside, but we do not want some of the internal users accounts to be able to access this site from outside the LAN. Is there any way in IIS to do this? I simply want to block a certain user account from accessing the authenticated piece from the Internet, but still allow them access when locally on the LAN.

we simply use NTLM internally ... we do not want some of the internal users accounts to be able to access this site from outside the LAN. I simply want to block a certain user account from accessing the authenticated piece from the Internet, but still allow them access when locally on the LAN. Not with a single web site. You would need two websites (on the same server or on different servers), then you can customize the permissions accordingly. Read this article for how to configure multiple websites on the same server. Various options exist, like items #3 (folder), 5-6 (host header on same ip address and port 80) http://networkadminkb.com/Shared%20Documents/IIS%20Best%20Practices%20on%20Windows%202003.aspx

For IIS questions, you can post in http://forums.iis.net/ forums. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

be sure to post back should you need any additional help.