The second option is to restrict users on an IP address level.We can list all the permitted IP
addresses using this method.The users are denied access if they are not accessing from this permitted
list. This could be achieved by clicking the Edit button under IP Address and Domain name
restrictions group box on the Web site's Properties window . See Picture-1 below:
![[Server-Tutor]-Windows-2003-IIS-6.0-Security---Part-Two-1 [Server-Tutor]-Windows-2003-IIS-6.0-Security---Part-Two-1](/./images/stories/windows/[Server-Tutor]-Windows-2003-IIS-6.0-Security---Part-Two-1.gif)
Picture-1 IP Address and Domain Name Restriction
You first select whether all users will be granted or denied access to the site by using the radio buttons at the top of the window. Then you can configure individual exceptions to the rule you defined in the white list box. Click Add to include an address in the exceptions list. You'll be prompted with a box asking whether you want to exempt a single computer, a group of computers (an IP subnet), or an entire domain .