Windows Authentication

The standard method of authentication used by the Web Helpdesk is via a username/password page.

However, if you are using the Web Helpdesk on an intranet and wish to avoid this, you can use Windows Authentication. To do so:

• Rename your existing secure.asp to secure.old. Rename securent.asp to secure.asp.



• In IIS management console, disable anonymous access and enable NT challenge response authentication



• Tell your guests/operators to go directly to the page they are interested in e.g. jobsel.asp, rather than oplogin.asp or gstlogin.asp.

For the system to correctly identify the user, it gets the NT user name and tries to find a record in the helpdesk database which contains this user name:

1. It checks to see if the user is a helpdesk operator by looking in the Users table for a record where either the username or e-mail field is equal to the detected Windows user name. If found, it will automatically log this user into the helpdesk as an operator.



2. If it can't find an operator with this Windows user name, it will look to see if this is a Guest (i.e. a Customer Contact). To do so, it checks forename, surname and e-mail fields of the Person table for a value equal to the Windows user name. If it finds a match, it will automatically log this user into the helpdesk as a guest.



3. If the Windows user is not found in either table, it will display an error message.

Home