title: IIS7 and Authentication problems
body: <p>i've got a stock standard ASP.NET web site, deployed to our development machine (internal machine in our server room).</p>
  
  <p>Now, this dev site can be accessed by both INTERNAL and EXTERNAL users. Now, in IIS6 we used to have it so that <em>Anonymous Authentication</em> was turned <em>off</em> and something else was turned on .. giving the users a popup model box for username and password. I <em>think</em> they had to type some username or password that was defined in a web.config file? (not their website account username/password)/</p>
  
  <p>Now, with IIS7, when i turn <em>Anon Auth off</em>, and turn on <em>Basic</em> or <em>Windows Auth</em>, i get access to the site BUT it's trying to log me in with those credentials .. and not the account the user signed up with (using some stock standard asp.net webform page).</p>
  
  <p>So ... is it possible to 'lock' the entire site and get the testers to get general access to the site .. which is different to their website username and password. Those usernames and passwords are for use in the site instead.</p>
  
  <p>does that make sense?</p>
  
  <p>cheers!</p>
  
  <hr>
  
  <pre><code>&lt;authentication mode="Forms"&gt;
      &lt;forms loginUrl="~/Pages/Login.aspx" protection="Validation" timeout="1000000000" requireSSL="false" slidingExpiration="true" defaultUrl="Default.aspx"&gt;
      &lt;/forms&gt;
  &lt;/authentication&gt;
  </code></pre>
  
  <p>there is no authorization section.</p>
  
  <p>also, when i add 'Digest Auth' to iis7 and enable that (and disable everythign else), i get the pop up window (kewl!) but i'm not sure what credentials i need to pass in. Where can i define those credentials manually (so they are seperate from the website's users) ??</p>