Pre-Configuration Details ----------------------------------- This contains all pre-configuration details in order for the code to work correctly. 1. 2 local users need to be created: username: SecureUser1. password: securepwd1 username: SecureUser2 password: securepwd2 2. A group RemotingUser needs to be created, and only user SecureUser1 is to be added to the group. 3. During demo, the login should be under user SecureUser2 4. A virtual directory NetSecurityDemo is to be created under localhost with read and run script permission 5. Under this folder, virtual directories soap, form, and formPg are to be created, each with read and script access 6. The virtual directory NetSecurityDemo is to map to the local folder c:\NETSecurity\web 7. IIS Authentication should be set to Anonymous, with IIS controlling password for each of these directories. 8. There should be no permissions for any of the WinForm or WinFormPg exes in .NET 9. Recomment the soap\server\server.cs lines for authenticating the principal by role, build, and copy the dll to web\soap\bin\Server.dll Execution Sequence ---------------------------- 1. Authentication in IIS ------------------------------ a) Ensure that authentication in IIS for the virtual directory soap is set to Anonymous Authentication, with IIS controlling the password.Open command prompt. run client.exe b) Set authentication to disable IIS control of password. Enter a wrong password. run client.exe c) Set authentication to Basic Authentication. run client.exe run client2.exe c) Set authentication to Integrated Windows Authentication run client.exe Add SecureUser2 to group RemotingUsers run client.exe 2. WinForm Increase Permission --------------------------------------------- a) With no permissions, run http://localhost/NETSecurityDemo/WinForm/WinForm.exe. An exception should be thrown b) Step by step, add a permission, and show the subsequent exceptions thrown, until everything works fine. 3. WinForm Programmatic Increase Permission ----------------------------------------------------------------- a) Remove existing permissions from .NET Configuration b) Run http://localhost/NETSecurityDemo/WinFormPg/WinFormPg.exe c) Install the setup program d) Show the updated permissions in the Configuration Framework e) Run http://localhost/NETSecurityDemo/WinFormPg/WinFormPg.exe