In IIS (Win2K), I've disabled anonymous access for our internal time tracking app I'm building. Right now, when a user hits the site, they get the log in (unless they are viewing it internally), then ...

An authentication method that proves the identity of users logging into a network. When a user logs in, the access server or authentication server sends a random number (the challenge) to the client.

This paper presents a type of verification technique that securely protects access to any restricted material by showing different random challenge on each access attempt. Each challenge generates a ...