This whitepaper is for historical reference only. Some content might be outdated and some links might not be available.
Change your Dockerfile to support Windows authentication
The following snippet demonstrates how to configure your IIS application running inside a container to use a gMSA. The following Dockerfile instructions install and configure Windows authentication inside the container, and on IIS.
# Install Windows Auth in IIS Feature RUN Install-WindowsFeature -Name Web-Windows-Auth –IncludeAllSubFeature # Configure the IIS Application Pool account to use Network Service account. That enables it to leverage gMSA. RUN Import-Module WebAdministration; Set-ItemProperty IIS:\AppPools\SiteName -name processModel.identityType -value 2 # Disable Anonymous authentication on IIS RUN Import-Module WebAdministration; Set-WebConfigurationProperty -Filter '/system.webServer/security/authentication/anonymousAuthentication' -Name Enabled -Value False -PSPath 'IIS:\' -Location 'SiteName' # Enable Windows Authentication RUN Import-Module WebAdministration; Set-WebConfigurationProperty -Filter '/system.webServer/security/authentication/windowsAuthentication' -Name Enabled -Value True -PSPath 'IIS:\' -Location 'SiteName'