Directory Security Property Sheet

Use the options in the Directory Security property sheet to restrict access to individual newsgroups or sets of newsgroups on the basis of the user name or to restrict access to all newsgroups on the basis of the client computer IP address. (For more information on how to control access to newsgroups, see Configuring Security.)

The Directory Security property sheet contains the following options:

Option Description

Password Authentication Method Authentication options. You can choose one or more options. To view the options, choose Edit.

Allow Anonymous Unrestricted user access to newsgroups that do not have permissions set on their directories. User names and passwords are not required.

Basic Authentication Authentication that requires the user to provide a valid Microsoft® Windows NT® user name and password that are authorized for access to that directory. The user name and password are sent as unencrypted clear text across the network. Permissions are set on the directory.

Windows NT Challenge/Response Authentication that encrypts the user name and password and then sends them to Microsoft NNTP Service. The user name and password must be authorized for access to the requested newsgroup directory. Microsoft Internet Mail and News supports this protocol. Permissions are set on the directory.

Enable SSL Client Authentication Enables secure client authentication using SSL encryption and certificates. A server SSL certificate is required.

Require SSL Client Authentication Requires clients to provide an encrypted user name and password using SSL.

Enable Client Certificate Mapping to Windows NT User Accounts Uses the Windows NT account mapped to the SSL client certificate to authenticate the user. Choose Client Mappings to enter certificates and Windows NT account names.

TCP/IP Access Restrictions The specific IP addresses that are allowed or not allowed access to this news site. By default, all IP addresses are granted access.

Granted Access Allows all IP addresses except those listed access to this news site.

Denied Access Denies all IP addresses except those listed access to this news site.

Type The type of address that is being added.

IP Address The IP address for a single computer that is being added. Choose DNS Lookup to find the IP address associated with the DNS name of the computer.

Network ID The base IP address for a group of computers that is being added. A subnet mask is required.

Subnet Mask The subnet mask that specifies the range of IP addresses for a group of computers that is being added. (For more information on subnet masks, see Microsoft Windows NT Server Networking Guide.)

Domain Name The domain name of a group of IP addresses that is being added.

Option	Description
Password Authentication Method	Authentication options. You can choose one or more options. To view the options, choose Edit.
Allow Anonymous	Unrestricted user access to newsgroups that do not have permissions set on their directories. User names and passwords are not required.
Basic Authentication	Authentication that requires the user to provide a valid Microsoft® Windows NT® user name and password that are authorized for access to that directory. The user name and password are sent as unencrypted clear text across the network. Permissions are set on the directory.
Windows NT Challenge/Response	Authentication that encrypts the user name and password and then sends them to Microsoft NNTP Service. The user name and password must be authorized for access to the requested newsgroup directory. Microsoft Internet Mail and News supports this protocol. Permissions are set on the directory.
Enable SSL Client Authentication	Enables secure client authentication using SSL encryption and certificates. A server SSL certificate is required.
Require SSL Client Authentication	Requires clients to provide an encrypted user name and password using SSL.
Enable Client Certificate Mapping to Windows NT User Accounts	Uses the Windows NT account mapped to the SSL client certificate to authenticate the user. Choose Client Mappings to enter certificates and Windows NT account names.
TCP/IP Access Restrictions	The specific IP addresses that are allowed or not allowed access to this news site. By default, all IP addresses are granted access.
Granted Access	Allows all IP addresses except those listed access to this news site.
Denied Access	Denies all IP addresses except those listed access to this news site.
Type	The type of address that is being added.
IP Address	The IP address for a single computer that is being added. Choose DNS Lookup to find the IP address associated with the DNS name of the computer.
Network ID	The base IP address for a group of computers that is being added. A subnet mask is required.
Subnet Mask	The subnet mask that specifies the range of IP addresses for a group of computers that is being added. (For more information on subnet masks, see Microsoft Windows NT Server Networking Guide.)
Domain Name	The domain name of a group of IP addresses that is being added.