Re: Authentication prompt keeps appearing when using Anonymous access

From: Jack Brewster (jbrewsterPLEASENO@SPAMnthurston.k12.wa.us)
Date: 05/31/02 

From: "Jack Brewster" <jbrewsterPLEASENO@SPAMnthurston.k12.wa.us>
Date: Fri, 31 May 2002 07:56:57 -0700

I don't have a solid answer for you, but I can suggest something to
investigate.

If you have applied the MS supplied IIS Lockdown tool and installed URL
Scan, it's possible that default settings applied during the installation of
these tools may have caused the problem. I can't speak to specifics, sorry.
Take a look at the MS page re: Urlscan for (potentially) more help (watch
for wrapping in url):
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/
tools/URLscan.asp

Hope that helps,

Jack

"Richard" <richard.stevenson@uk.akzonobel.com> wrote in message
news:906201c208a2$f0b9ae60$2ae2c90a@hosting.microsoft.com...
> Hi
>
> I have a 'minor' issue which I've not been able to get to
> the bottom of.
>
> I have two domains A and B. A contains Worldwide intranet
> server, B contains user accounts from another region who
> require access to domain A. Basically, clients from domain
> B constantly receive the "Enter Network Password...Please
> enter your authentication information" where a logon and
> pwd is required. They are accessing a URL on our intranet
> server which contains a link to a Word (.doc) document and
> calls up the document within the IE browser. If you
> select 'cancel' on this without entering any credentials
> the page eventually appears. This is somewhat annoying to
> users when constantly being prompted, and ideally no logon
> credentials should be required as this is a corporate
> intranet and access is internal (e.g. not via proxy,
> firewalls etc). In terms of permissions, I have applied
> the anonymous user account (IUSR_computername), Read and
> Execute permissions to the specific files and respective
> folders in the link. My understanding is that if the
> anonymous user account was applied, then access should be
> granted regardless of whether the client requests are
> coming in from an untrusted domain, after all, this is how
> many requests on the internet work. The actual web site
> has the anonymous user account applied via IIS security
> also. There are no issues with IUSR account, e.g. not
> locked out, has log on locally right etc, but constantly
> get a prompt for authentication. * One interesting point,
> I dumped a standard .txt file in folder relative to URL,
> and amending the URL to call up the .txt file instead of
> the .doc file worked first time without any prompt! I
> don't understand why only .doc does this. I assume this
> may be the case with .xls and other office extensions? is
> this something to do with calling up an office file within
> a browser, e.g. some perms problem? I suspect this is
> something simple, but causing many hours of testing, and
> yet can't get rid of this annoying authentication prompt.
>

Relevant Pages