Hey 

I've got a problem with trying to password protect my DNN sites.  We have a Development server with a copy of all our sites and also sites currently in development.  In IIS6 I used to disable Anonymous Access in the Directory Services tab and enable Windows Authentication. Then I'd set up a local user account on that machine eg webuser.  Thus when I go to the url of the site I have to enter that user and password before I can get to the site which prevents anyone else from seeing it including search engines.

Since moving to IIS7 I've been able to do this with some sites but not others.  I currently have two sites as examples.  One on 4.8.4 (which was originally installed as 4.6.2) and another on 4.9.0 (new install).  For both sites, under IIS Authentication I diable anonymous access and enable windows authentication.  Both sites popup a login box when first visiting them but the 4.9.0 site wont accept my login/password.  If I click cancel I end up at a page (only in Firefox though): XML Parsing Error: no element found. 

Both are set to Integrated Pipeline, both have only DNN enabled in Host..HostSettings..Authentication Settings.  I don't quite understand if what I'm trying to do is AD Authentication but seeing as neither site has the AD Authentication provider installed (from what I can see in HostSettings) I assume not.  There are a few differences in web.config for the sites but they seem mostly related to versions of System.Web.Extensions dll that are in use. 

Any help gratefull received

 mc

I tried chaning the Classic Mode but that didn't seem to affect anything. 

What I did in the end was use Basic Authentication (an optional addin feature for IIS7) and stopped using Windows Authentication.  It works much better now and was probably what I should have been using in the first place