Just setting up our first site on a dedicated windows 2008 server and have run into a problem.
The security guidelines suggests to use Windows Athentication on the admin directory, However documentation on IIS says that you cannot use both "challenged-based" and "login redirect-based" authentication together.
If I try to disable the "Forms Based" login, it says it is read-only.
The manual is a little unclear about enabling windows based authentication. I am not sure if you leave the "Forms Based" login enabled, since it says that after you authenticate with the windows based authentication you will be directed to the admin login page.
If that is correct, how do you do it on IIS7 ?
Thanks, Allen