Re: Windows Auth Problem

Walter,

Thank you for the thorough explaination. That's good info to know. I was
mistaken about the new IE7 option. The site works as expected when that
checkbox is selected. And since that is the default, we will be ok with
that. But IE6 remains to be a problem. IE6's default configuration does
not have the "Include all local (intranet) sites not listed in other zones"
option selected. We either need this, or we need to add the site to the
list. That's the only way we can hit the site without it asking for a
logon. Regarding the number of dots, our development server is named
"labweb" (no dots). We develop locally using "localhost" (no dots). Yet
neither of these work unless we turn on the above option or add these to the
intranet site list. I would think that http://localhost is always
considered an intranet site, but evidently it is not. I still think we're
doing something wrong, I just don't know what. BTW, we have no proxy
servers.

Thanks,

John

"Walter Wang [MSFT]" <wawang@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:BuJkZs8LHHA.2080@xxxxxxxxxxxxxxxxxxxxxxxxx
John,

Here's some rules about how IE determines a URL belongs to intranet zone
or
not:

1) By the presense of or lack of dots (periods) in the domain name:

http://DOMAINNAME -> Intranet Zone
http://DOMAINNAME.COM -> Internet Zone
http://192.168.1.15 -> Internet Zone

2) Besides above rule, IE also uses proxy settings (bypass list,
proxy.pac,
etc), whatever goes to the proxy will be in the internet zone. Whatever
doesn't hit the proxy (host in bypass list, "return DIRECT" in proxy.pac)
will be in intranet.

3) For IE6, IE also provides the following configuration box for the
intranet zone (Internet Options -> Security -> Local Intranet -> Sites) :

* Include all local (intranet) sites not listed in other zones
* Include all sites that bypass the proxy server
* Include all network paths (UNCs)

These three options are checked by default in IE6; in IE7, the
"Automatically detect intranet network" is checked by default.

Therefore, I think the option you mentioned is required to make it work
correctly. Would you please tell me why the option needs to unselected on
your side?


Regards,
Walter Wang (wawang@xxxxxxxxxxxxxxxxxxxx, remove 'online.')
Microsoft Online Community Support

==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================

This posting is provided "AS IS" with no warranties, and confers no
rights.



.

Relevant Pages

  • Re: Windows Auth Problem
    ... http://DOMAINNAME -> Intranet Zone ... http://DOMAINNAME.COM -> Internet Zone ... Besides above rule, IE also uses proxy settings (bypass list, proxy.pac, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • I need flowchart for how Internet Explorer determines security zon
    ... the security domain to find out if the action is allowed. ... zone until all of the IE patches have been distributed. ... adding the site to the intranet site's list would still have this fixed. ... When the server I was pulling the assembly from was in the intranet zone, ...
    (microsoft.public.internet.explorer.ieak)
  • Re: Windows authentication failing
    ... This explains what IE defines as "the intranet zone" ... http://myserver.myDomain.com is in the internet zone, ... an internal web server used exclusively for internal web based ...
    (microsoft.public.inetserver.iis.security)
  • Re: Getting 401.1 when using DNS, okay using NETBIOS and Localhost
    ... Internet address, hence why you recieve a prompt for login box. ... make sure your DNS name is included within your Intranet ... zone in IE. ... Integrated Windows Authentication may not work over the Internet - ...
    (microsoft.public.inetserver.iis.security)
  • Re: Microsoft has not verified that this....
    ... > I dont think I have a proxy. ... want to ensure that IE knows what Internet domains are intranet domains. ... I select Intranet and then click sites button. ... IE should say that you are in the local intranet zone and then ...
    (microsoft.public.sharepoint.portalserver)