The sample demonstrates the Windows Server 2003 Authorization Manager Framework. This is a simple web expense application. To run this sample: Copy the included files into a virtual directory for IIS. Place the AzStore.xml file in the root of the C drive or change the path to the AzStore.xml file in Common.asp (AZMAN_STORE_URL) to the location of the AzStore.xml file. Set the Directory Security Authentication Properties to Windows Integrated Authentication Make sure that "Active Server Pages" is enabled. This is done in the IIS MMC UI. By selecting the "Web Service Extensions" container on the left pane and clicking on "Active Server Pages" in the list on right pane and selecting "Allow" Use Internet Explorer to browse to the sample.htm page in the virtual directory create above. Note: This sample demonstrates a web expense application running in the context of a web service account. Usually ASP Applications will run in the context of the web client user. While you can run this sample as the with out IIS URL Authorization configured client user in practice the web application will not impersonate the client user when using Authorization Manager. Since ASP does not support you to configure the server to run in a context other than impersonating the client user, use IIS 6.0 URL Authorization to configure this Application run in the context of the IIS Worker process corresponding to the IIS 6.0 Web Site that contains this sample. You can setup a worker process to use an account that you want this sample to run as. See IIS 6.0 Online help for more info on IIS 6.0 URL Authorization. SetURLAuth.vbs demonstrates setting the IIS meta-base attributes. For more information on IIS 6.0 URL Authorization see Microsoft Knowledge Base Article Q326020. For More information on Authorization Manager see the above Knowledge Base Article and the Microsoft Platform SDK