IIsIPSecurity.DomainGrant (ADSI)

The DomainGrant method gets or sets an array of domains that are permitted to view the IIS site, service, virtual directory, or file. This is only effective if permission is denied by default (if IIsIPSecurity.GrantByDefault (ADSI) is set to false).

[Visual Basic]
objIIsIPSecurity.DomainGrant = <array of domains>

Code Example

<%
' Remember to enable Integrated Windows authentication and
' disable Anonymous Access, or you will get a Server 500 error.
Dim SecObj
Dim MyIPSec
Dim IPList
' Get the IIS object that holds the info for the default site.
' This could be any site root/vdir, or IIS://LocalHost/W3SVC for global
' properties.
Set SecObj = GetObject("IIS://LocalHost/W3SVC/1/Root")
' Get the IIsIPSecurity object.
Set MyIPSec = SecObj.IPSecurity
' Make sure GrantByDefault=FALSE or your changes will not count.
If (TRUE = MyIPSec.GrantByDefault) Then
Response.Write
"<BR>GrantByDefault was not FALSE. Setting to FALSE.<BR>"
MyIPSec.GrantByDefault = FALSE
End If
' Get the Grant list as an array, and add your newly allowed Domain
DomainList = MyIPSec.DomainGrant
Redim DomainList (Ubound(DomainList)+1)
DomainList (Ubound(DomainList)) = "somedomain.com"
' Set the new lists back in the metabase in two stages, and then set
' the metabase.
MyIPSec.DomainGrant = DomainList
SecObj.Setinfo
Response.Write "The IPRestriction has been set<BR>"
%>

Requirements

Client: Requires Windows XP Professional, Windows 2000 Professional, or Windows NT Workstation 4.0.

Server: Requires Windows Server 2003, Windows 2000 Server, or Windows NT Server 4.0.

Product: IIS

See Also

Concepts

IIsIPSecurity (ADSI)

Using ADSI to Configure IIS