[This is preliminary documentation and subject to change]

IP Address Access Restrictions

Use this dialog to provide or prevent specific users from accessing this Web site, virtual directory, or directory.

By default, all computers are:

Granted access

Select this button to allow all computers access to this resource, except those computers specifically listed as exceptions. For example, you can exclude a particular individual or group by denying access to your server from a particular IP address, or prevent entire networks from accessing your server, while allowing all others to have access.

Denied access

Select this button to deny access to all remote users except those whose IP addresses have been specifically granted access. IP address security is most useful on the Internet, to exclude everyone except known users.

Except those listed below:

To grant or deny access to a specific computer or group of computers:

1. Click Add. If the Granted Access button is selected, the Deny Access On dialog box appears; if the Denied Access button is selected, the Grant Access On dialog box appears.
2. In the IP Address column, type the unique numeric TCP/IP network address of the specific computer to be granted or denied access to your site.
3. In the Subnet Mask column, type the number that identifies the TCP/IP network subdivision of the group of computers to be granted or denied access to your site.
4. In the Domain column, type the domain name of the network to be granted or denied access to your site belongs.

Note Although three text boxes are available when editing IP address restrictions (IP Address, Subnet Mask, and Domain), all three cannot be used simultaneously.

To restrict access to a single computer, specify an IP address only.

To restrict access to a group of computers using an IP range, specify an IP address and a subnet mask only.

To restrict access to a group of computers using a domain, specify a domain only.

© 1997-2001 Microsoft Corporation. All rights reserved.