DomainGrant

[This is preliminary documentation and subject to change]

You can use the DomainGrant property of the IIsIPSecurity object to edit lists of domains that are allowed access to the server.

SecObj.DomainGrant = Domain

varDomainGrant = SecObj.DomainGrant

<%

' Remember to enable Integrated Windows Authentication and

' disable Anonymous Access or you will get and Server 500 error.

Dim SecObj

Dim MyIPSec

Dim DomainList

' Get the IIS object that holds the info for the default site.

' This could be any site root/vdir, or IIS://LocalHost/W3SVC for global

' properties.

Set SecObj = GetObject("IIS://LocalHost/W3SVC/1/Root")

' Get the IIsIPSecurity object

Set MyIPSec = SecObj.IPSecurity

' Make sure GrantByDefault=FALSE or your changes will not count

If (TRUE = MyIPSec.GrantByDefault) Then

Response.Write

"<BR>GrantByDefault was not FALSE. Setting to FALSE.<BR>"

MyIPSec.GrantByDefault = FALSE

End If

' Get the Grant list, as an array, and add your new allowed domain

DomainList = MyIPSec.DomainGrant

Redim DomainList (Ubound(DomainList)+1)

DomainList (Ubound(DomainList)) = "somedomain.com"

' Set the new lists back in the metabase in two stages, and then set

' the metabase

MyIPSec.DomainGrant = DomainList

SecObj.Setinfo

Response.Write "The IPRestriction has been set<BR>"

%>