single entry point iis web site

I have created an intranet site for my organization. user
has to go through NT Domain login process to enter the
site. I do not want to use IIS provided Windows Integrated
Authentication or Basic Authentication process to handle
this login process.

I am using ADSI object for authentication via a web form.
In the web site, the files format are asp, html,ms
dcument,pdf etc. In asp files I can check if the users
provided a valid login name and password at the login page.
How do I check when user request for one of the doc or pdf
file. Let me give an example.
If users type
http://intranet.mycompany.com/info/info.asp
info.asp page will check if users pass login id and
password. If not, info.asp page will redirect to
http://intranet.mycompany.com/login.asp which is a login
page.

If users type
http://intranet.mycompany.com/infodoc/infodoc.doc I have
no way to check if the users are logged on or not.
How can I solve this problem?

or is there any way I can get the request url from my site
index page before it goes to its destination?

or Can I make my web site always a single and only entry
point?

I really appreciate your feedback.

Thanks
Jyoti

 > I have created an intranet site for my organization. user
 > has to go through NT Domain login process to enter the
 > site. I do not want to use IIS provided Windows Integrated
 > Authentication or Basic Authentication process to handle
 > this login process.

Seeing as this is on an intranet, *not* using integrated authentication
seems like more work than is necessary. But it's fine, if that's what you
prefer.

 > How do I check when user request for one of the doc or pdf

Assuming that the documents are in a location addressable from the browser,
you need proper file system permissions. Actually, you should have properly
set NTFS permssions, regardless.

Using ASP and ADSI to authenticate and check permissions for web objects is
fine, but for other types of objects and documents, you need to assign
proper NTFS permissions.

 > or is there any way I can get the request url from my site
 > index page before it goes to its destination?

Not really. If the link is to a .doc or .pdf, then that's that. If they
have access to the file according to the file system ACL, then they have
access to the file.

 > or Can I make my web site always a single and only entry
 > point?

I'm not sure that I understand your use of the phrase "single and only entry
point." If you're managing permissions for web pages using ASP alone, you
need a universal include structure that does a check on every page to ensure
that the user is authorized to view that page. If done correctly, it
shouldn't matter if the user pulls up the login page or some bookmarked page
that's deep within the site--if they haven't authenticated, they should be
sent to the login page.<!-- ~MESSAGE_AFTER~ -->