---
title: Windows IIS Anonymous Authentication Strategy
slug: kronpam-reference-guide-3-6-0/windows-iis-anonymous-authentication-strategy
docTags: 
createdAt: 2024-12-02T14:46:07.177Z
---

This section will explain how to change the password of the user-defined for IIS Anonymous Authentication with the help of Application Configuration and Trigger.

WinRM service must be installed on those servers.

Users must have configured IIS information for this option and should have the below example.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/DllBX8CDG_PLh8I46T5Z6_image.png "IIS Anonymous Authentication Definition Screen")

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/8Uzp9vx0MIcrvob4sj-MH_image.png "IIS Anonymous Authentication Definition Screen")

For this option, an Application Trigger Config definition must be made first. 

1. Navigate** to the Secrets > Configurations menu > Application Configuration.**

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/rbDpDDSerkDRFSTlkhmW0_image.png)

1. Click the **Add **and the parameters must entered as described in the screen below.
2. Windows IIS Anonymous Authentication is selected as **the Strategy.**
3. IIS Anonymous Authentication will use WinRM service that’s why the user should enter WinRM port information.
4. Select **NTLM **as the WinRM Authentication Method and press the** Save **button.
5. After this definition, the user should open **the Secrets >Application Management** screen.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/BxoZHXFcDToxr-v_RI7D0_image.png)

- Click the **Add** button.

With this definition, when the Vault account's password is changed, reset, or updated, IIS Anonymous Authentication creates a trigger so that the password defined for the trigger is also automatically changed.

- Enter the name of the trigger in the Name field.
- Select the **Application Configuration** that defines the name above definition.
- Enter the **IIS Sites Name** field from IIS which is described below the picture.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/wGvWiM4JlCwXzfvE4PKid_image.png" size="66" width="663" height="505" position="center" showCaption="false"}

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/B1XPqI4gTB9nD-GdA6o0j_image.png" size="54" width="387" height="401" position="center" showCaption="false"}

1. Select the Vault Account that is defined in Password Vault and whose password we want to change.
2. If the user defined for Password Vault is an authorized user to make changes on IIS, the **Use Authentication User **switch box is turned off. If it is not an authorized user, in this case, the **Name and Password **information of the** Administrator user** must be entered in the relevant fields.
3. The Target Type value should be selected as **Single Device**.
4. Select device information where IIS is installed and the device to be modified.
5. If all values fields are entered user should click the **Save **button then the configuration will be completed.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/02ilL9WehdBBFfA_YZyJc_image.png)

1. Navigate to the Vault Screen and select the **Vault** account.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/n2b01j84CUcK3yminImaZ_image.png)

- Click the above picture button and a new popup will be shown below.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/Jgu5ey1CgIkH23Xl9rTSV_image.png)

If **Reset Password** or **Update Password** is clicked, the system will change the password information from Windows Local User or Active Directory for the selected account. Additionally, a new Application Trigger record will be created to change the password from the IIS server.

The Application Management screen must be opened, and the defined record must be listed. To start this record and change the password from the IIS Site immediately, the **Run **button must be clicked. If not, the Application Trigger job will automatically run this record according to the defined period.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/oS3h8ld_66L60iv_7zSEt_image.png)