Psst! Did you know DevelopmentNow is a mobile web site design agency?

Contact us for help mobilizing your site, or to sign up for our beta Mobile Web SDK!
all groups > iis security > march 2006 >

iis security : Local Server Logon Required?


John A Kushwarra
3/17/2006 12:25:30 PM
Hello

Here is a strange one. I have and asp 2.0 web site hosted on ServerA that
uses windows authentication. When I acces the site from a local pc
everything works the way taht it should. If I access the site from a
browser running on the server that is hosting it I get the windows logon box
asking me for my credentials. Even if I type them in it will not let me
through. The local server is not running IE6 extend security. If I open
the IIS Configuration and browse the site it will ask me for my credentials
then let me in. Any ideas would be greatley appreciated.

Thank You
John

Keith
3/19/2006 10:46:26 AM
Actually not so strange.

I imagine what is happening is this:

1. You have the IIS website setup with both anonymous and Windows Integrated
authentication
2. The anonymous account has access to the site so the remote user takes on
those credentials to get into it
3. The local machine account you're logging in with does not have permission
to the site so when it tries Windows Integrated Auth first it accepts those
dispermissive credentials and locks you out.

Disable Windows Integrated auth and see what happens. reply back and we'll
sort it out.

[quoted text, click to view]
Roger Abell [MVP]
3/19/2006 11:15:52 PM
You should check the IE on the server for the account used to
see whether Windows Integrated Authentication is allowed
(in Internet Options, Advanced tab toward the bottom)

[quoted text, click to view]

AddThis Social Bookmark Button