all groups > iis security > november 2004 >
You're in the

iis security

group:

Integrated Windows Authentication problem in AD 2000


Integrated Windows Authentication problem in AD 2000 kyyap NO[at]SPAM streamyx.com
11/23/2004 7:55:36 PM
iis security:
Hi all,
Currently I have change one of our intranet website to Integrated
windows authentication mode in IIS5.0 ,the website is use to let the
system administrator to create user account/group in Active Directory.

The are several problem happen after this change ,the account creation
with home directory & mailbox doesn't work anymore.Do you guys have
any idea what is wrong?

Maybe I need to give some breift introduction how this account create
page work.
step 1)System admin logon the website go to account create function
step 2)the system will retrieve the mailbox server and available user
mountpoint(by doing this the system will run the security context as
service account,to get all this information)

After I have change the IIS Integrated windows authentication mode in
IIS5.0,
step 2 doesn't work anymore.

Regards
Re: Integrated Windows Authentication problem in AD 2000 Yap
11/24/2004 5:47:01 AM
I manage to resolve the problem,this is due to the win2k kerberos problem in
IIS
http://support.microsoft.com/default.aspx?scid=kb;en-us;326985
anyway thanks alot for your reply ,Tom :)

Cheers

[quoted text, click to view]
Re: Integrated Windows Authentication problem in AD 2000 Tom Kaminski [MVP]
11/24/2004 8:24:17 AM
[quoted text, click to view]

Are the other services on different boxes? If yes, then this could be a
delegation problem as IIS does not have the user's password to authenticate
to the other servers with. Stick with Basic authentication in that case.

AddThis Social Bookmark Button