Groups | Blog | Home
all groups > iis security > september 2006 >

iis security : Windows Integrated Authentication - weird issue


smith777
9/6/2006 8:20:03 AM
I have Windows 2003 in a domain and running a web application on it
(Sharepoint). I have IIS's authentication set to Windows Integrated
Authentication.

I was looking for users to be able to login automatically to the web
application using the credentials that they used to login to their computers.
When they are logged in to the domain they go right in without being prompted
for a password. When they are out of the office, its not using their cached
credentials, it prompts for a login.

I did some research on http://support.microsoft.com/kb/258063/en-us and it
makes sense but what i don't understand is that i have 1 laptop outside of
the domain, so it would have logged in using cached credentials, and it goes
right into the site without being prompted for a password. All other laptops
outside of the office, it requires a password. I've checked everything to
compare laptops and see nothing different.

Does anyone know how this other laptop outside of the domain is capable to
getting to the website without having to enter in a password? should i chaulk
Ken Schaefer
9/11/2006 12:00:00 AM
It may be that the user choose to have their browser remember their password
for the site (that's an option in IE).

Cheers
Ken

[quoted text, click to view]

AddThis Social Bookmark Button