vbscript - Authenticating user via active directory groups in classic ASP -

we have security set intranet site follows through active directory.

first have security groups department (sales, accounting, etc.)

second have ad security group intranet site people logon via nt challenge/response. purpose let's call group "intranet users"

under intranet users, i've added departments allowed use intranet.

so in ad have intranet users , members of group sales , accounting.

what need in classic asp authenticate user against groups under intranet users.

i dug old code used elsewhere can't work , unless google-fu of topic terrible (a distinct possibility) can't find proper documentation of doing in classic asp.

this code group enumerate objects within if it's user, not group.

bauthuser = false set objgroup = getobject("winnt://domain/intranet users") each objmember in objgroup.members     if objmember.class = "user"           if objmember.name = request.servervariables("auth_user") bauthuser = true     end if next 

the above code works if there actual user in security group there no users in group, other security groups.

what need loop through groups in "intranet users" through users in each group authenticate.

am on right track here or totally off?

thanks in advance.

this depends on functionality looking for.

if goal "everyone can access site, if in intranet users, functionality" path on correct.

if want able "only intranet users can access site" there's undocumented feature of iis can leverage. if go folder security options, , remove generic accounts acl , add intranet users group acl, iis throw 403 exception if user authenticated not in intranet users.