I used previous versions of Axosoft and do not recall this security issue I may be wrong...

He is my dilemma...For the web interface (technician) not customer portal we have internal users using Windows Credentials and outside consultants that are helping us trying to use Axosoft logins. Is this possible to do mixed mode via the web?

 As if I remove the IIS Anonymous user Windows Auth works fine, but then built-in Auth does not and vice versa if I add Anonymous back to IIS.

 Any guidance or help would be greatly appreciated.

 Thank you in advance,

J.  Todd Jennings

No, it is not possible to have both auth types on the same installation, and it was the same in previous versions.  What you could do is set up another virtual directory, or web site, that's set up differently but pointing to the same database. You can just copy the current OnTimeWeb folder and point another virtual directory to the copy.  So you'd have different URLs for your internal users than you would for your external consultants.

Dan,

 That makes sense...I appreciate your response and information this is very helpful

 Thank you,

 J. Todd Jennings