WindowsAuthenticationSection Class [IIS 7 and higher]

Configures Integrated Windows authentication.

Syntax

class WindowsAuthenticationSection : ConfigurationSectionWithCollection

Methods

The following table lists the methods exposed by the WindowsAuthenticationSection class.

Name

Description

Add

(Inherited from ConfigurationSectionWithCollection.)

Clear

(Inherited from ConfigurationSectionWithCollection.)

Get

(Inherited from ConfigurationSectionWithCollection.)

GetAllowDefinition

(Inherited from ConfigurationSection.)

GetAllowLocation

(Inherited from ConfigurationSection.)

Remove

(Inherited from ConfigurationSectionWithCollection.)

RevertToParent

(Inherited from ConfigurationSection.)

SetAllowDefinition

(Inherited from ConfigurationSection.)

SetAllowLocation

(Inherited from ConfigurationSection.)

Properties

The following table lists the properties exposed by the WindowsAuthenticationSection class.

Name

Description

AuthPersistNonNTLM

A read/write boolean value. true if IIS automatically reauthenticates every non-NTLM (for example, Kerberos) request, even those on the same connection; otherwise, false. The default is false.

NoteNote:
A setting of false means that the client will be authenticated only once on the same connection. IIS will cache a token or ticket on the server for a TCP session that stays established.

AuthPersistSingleRequest

A read/write boolean value. true if IIS automatically reauthenticates every NTLM request, even those on the same connection; otherwise, false. The default is false.

NoteNote:
A setting of false means that the client will be authenticated only once on the same connection. IIS will cache a token or ticket on the server for a TCP session that stays established.

Enabled

A read/write boolean value. true if Integrated Windows authentication is enabled; otherwise, false. The default is false.

Location

(Inherited from ConfigurationSection.) A key property.

Path

(Inherited from ConfigurationSection.) A key property.

Providers

An AuthenticationProviderSettings value that specifies security support providers that are used for Integrated Windows authentication.

SectionInformation

(Inherited from ConfigurationSection.)

UseKernelMode

A read/write boolean value. true if Integrated Windows authentication is done in kernel mode; otherwise, false. The default is true.

NoteNote:
Using kernel mode improves authentication performance. However, if you want to use the Kerberos protocol in a Web farm, you may want to set this property to false.

Subclasses

This class contains no subclasses.

Inheritance Hierarchy

ConfigurationSection

   ConfigurationSectionWithCollection

      WindowsAuthenticationSection

Requirements

Type

Description

Client

Requires IIS 7 on Windows Vista.

Server

Requires IIS 7 on Windows Server 2008.

Product

IIS 7

MOF file

WebAdministration.mof

See Also

Reference

AnonymousAuthenticationSection Class [IIS 7 and higher]

AuthenticationProviderSettings Class [IIS 7 and higher]

AuthenticationSection Class [IIS 7 and higher]

BasicAuthenticationSection Class [IIS 7 and higher]

ClientCertificateMappingAuthenticationSection Class [IIS 7 and higher]

ConfigurationSectionWithCollection Class [IIS 7 and higher]

DigestAuthenticationSection Class [IIS 7 and higher]

FormsAuthenticationConfiguration Class [IIS 7 and higher]

FormsAuthenticationCredentials Class [IIS 7 and higher]

FormsAuthenticationUser Class [IIS 7 and higher]

IisClientCertificateMappingAuthenticationSection Class [IIS 7 and higher]

PassportAuthentication Class [IIS 7 and higher]

StringElement Class [IIS 7 and higher]