Using a default domain with basic authentication

With only Basic authentication configured, users must provide a domain name when logging on to the Web Access application. For example, a user in domain myDomain with a username of Rogers must specify myDomain\Rogers when logging on to the Web Access application.

It is possible for IIS and Enterprise Vault to use a default domain for Basic authentication. In this case, users in the default domain do not need to specify a domain name when starting the Web Access application. Users in other domains must still specify a domain name.

Setting up a default domain in IIS

You can set up IIS so that it uses a default domain for Basic authentication. How you do this depends on the version of IIS that you have installed.

Note that the default domain does not work unless you also define it for the Web Access application.

To set up a default domain in IIS 6.0

  1. Start Internet Information Services (IIS) Manager.

  2. Expand the Web Sites container for the Enterprise Vault Web Access application computer.

  3. Expand the Default Web Site container.

  4. Right-click the EnterpriseVault folder, and then click Properties.

  5. In the EnterpriseVault Properties dialog box, click the Directory Security tab.

  6. In the Authentication and access control section, click Edit.

  7. In the Authentication Methods dialog box, uncheck Enable anonymous access.

  8. Check Basic authentication.

  9. To set the default domain, do the following:

    • Click Select.

    • Enter the name of the domain that contains the majority of user accounts that will be using the Web Access application.

    • Click OK.

      If there is a prompt about inheritance overrides, click Select All and then OK.

To set up a default domain in IIS 7.0

  1. Start Internet Information Services (IIS) Manager.

  2. Expand the Sites container for the Enterprise Vault Web Access application computer.

  3. Click the EnterpriseVault folder.

  4. Double-click Authentication in the IIS area at the right.

  5. Ensure that Anonymous Authentication is disabled and Basic Authentication is enabled.

  6. To set the default domain, do the following:

    • Right-click Basic Authentication, and then click Edit.

    • Enter the name of the domain that contains the majority of the user accounts that will be using the Web Access application.

    • Click OK.

Setting up a default domain in the Web Access application

Note that the default domain does not work unless you also define it in IIS.

To set up the Web Access application so that it uses the same default authorization domain as you have set up in IIS

  1. Use a text editor to create an initialization file called WebApp.ini, containing the following line:

    Domain=DomainName

    where DomainName is the name of the domain that you have specified in IIS for Basic authentication. Note that entries in this file are case-sensitive.

    For example, to use a domain called "myDomain", the line to use is as follows:

    Domain=myDomain

  2. Save the file in the Enterprise Vault program folder, normally C:\Program Files\Enterprise Vault, on the computer that runs the Web Access application.