IIS and Integrated Windows Authentication -- iis security

Viperlein
11/11/2004 8:54:02 AM

Hmmm, thanks.

But why does this not happen to ALL people, but only a few with their
certain profile.
How can this be profile related ? In the company each one has the same
installation and updates. Some have more software than others. But in the
end, the browser configuration is the same to all.
I thought if I activate "Integrated WIndows Authentication", the login of
the user is used automatically and all the rights for drives and so on are
taken from the Active Directory, as it is for all who do not get the error ?

[quoted text, click to view]

Viperlein
11/11/2004 2:06:52 PM

That's sure :))
Erm, yes, that's what other guys told me, too. It is in the local intranet
of our comapny and also added to the trusted ones. As I said, for most of the
people it works, but there are few which cannot access it, because of some
settings in their profile. And that is making me crazy :))

[quoted text, click to view]

Miha Pihler
11/11/2004 5:14:57 PM

Hi,

You will always get authentication failed on a website that is not
accessible anonymously. This is "caused" by web browser (any of them) trying
to access site anonymously (browser can't know beforehand that site is
protected). Once the site returns "authentication failed" it will return
list of authentication options that it will support (e.g. IA, Basic, ...).

INFO: How IIS Authenticates Browser Clients
http://support.microsoft.com/default.aspx?scid=kb;en-us;264921

Mike

[quoted text, click to view]

Miha Pihler
11/11/2004 6:37:40 PM

Integrated Authentication works only for sites that are located in Local
Intranet zone in IE (if you think logically, why would browser send your
credentials to just any site on the _internet_ that would request them ;-)
....). This would be default be e.g. http://site/ but not
http://site.domain.com or http://10.10.10.10 (where 10.10.10.10 is IP of
site.domain.com). If you add http://site.domain.com to your Local Intranet
Zone your browser will then use IA for when client accesses this site.

You can centrally manage IE Zones using group policy and Active Directory.

Mike

[quoted text, click to view]

Miha Pihler
11/11/2004 11:51:29 PM

There is not much I can do...

You can try and reset IE settings (Open IE -> Tools -> Internet Options ->
Advanced tab -> Restore Defaults). Also compare Security settings (Open
IE -> Tools -> Internet Options -> Security) between working and non-working
computers.

You can also try and disable IA in IE under Advanced tab just for a test
(you will have to reboot the computer).

Mike

[quoted text, click to view]

Got something to say? Click here to post a reply to this thread.

Don't see what you're looking for? Try a search.

View other messages about iis security

iis security : IIS and Integrated Windows Authentication