Designing Secure Web-Based Applications for Microsoft Windows 2000 with CDROM

Available in IIS 4?

Yes. This has been available since the first versions of IIS. IIS 4 allows password control; IIS 1, IIS 2, and IIS 3 do not support password management.

What privileges are required?

The IUSR_machiname, or any account being used for anonymous access, must have Network Logon.

Supports delegation?

No. The client account cannot leave the Web server computer because a Windows subauthentication DLL is used to log on the account.

Delegation capabilities diagram

Requires Active Directory?

No. Anonymous will work with or without Active Directory.

Browser support

All.

Works through proxies and firewalls?

Yes.

Other notes

Technically, this is not an authentication scheme.