RE: prompted for username, password on iis5 running xp pro

From: Ray Hu [MSFT] (rayhu@online.microsoft.com)
Date: 12/17/02


From: rayhu@online.microsoft.com ("Ray Hu [MSFT]")
Date: Tue, 17 Dec 2002 05:28:35 GMT


Hi Dmitri,

When you view the webpage, you must provide a credential (username and
password) which the computer can identify. It can be a local user or a user
within any trusted domain. LSA checks the credential against local SAM
database, the domain that the Web Server is a member of and all trusted
domains.

When you configure your website without anonymous access, when you visit
the website, you will get a "401 authentication required". Then, IE and Web
Server will negociated an authentication method. If the user cannot input
an valid username/password, the username/password box will be prompted for
three times. After the user is authenticated, if the user has permission,
the web server will send the content to the client. Otherwise, the
webserver sends an 403 access denied error.

If you use Windows Integrated Authentication, the scenario is as below:

If your client computer is also a part of the domain, it will authenticate
automatically.
If your current credential on client computer is same as the credential on
web server in local SAM, it will also be used automatically.
Otherwise, you will be prompted to enter the username/password.

If you use Basic Authentication, you must enter username/password
explicitly. You can configure a default domain in IIS, so that your client
doesn'y need to enter the domain name.

IIS on Windows XP pro is IIS 5.1. The security features and architecture of
the Web Server in Windows 2000 Server and Windows XP Pro are same. The
limitations of Windows XP Pro are: Only one website in XP pro, concurrent
users cannot exceed 10, HTTP Compression are not available in XP pro, etc.

Please let me know if this solves your problem or if you would like further
assistance.

I look forward to hearing from you.

Sincerely,

Ray Hu
Microsoft Online Support Engineer

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



Relevant Pages

  • RE: prompted for username, password on iis5 running xp pro
    ... >Server will negociated an authentication method. ... >an valid username/password, the username/password box ... >the web server will send the content to the client. ... >the Web Server in Windows 2000 Server and Windows XP Pro ...
    (microsoft.public.inetserver.iis.security)
  • Re: prompted for username, password on iis5 running xp pro
    ... First, if XP pro can only have one site, then the first step seems to be ... access is unchecked except for "Integrated windows authentication", ... you will get a "401 authentication required". ... > the web server will send the content to the client. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Pass username and password instead of userprompt
    ... I do not think it is possible with VB; you'd need a custom web browser since ... This is why I say you should re-think your custom authentication scheme. ... What you are doing is analogous to printing out the username/password on the ...
    (microsoft.public.inetserver.iis.security)
  • Re: VPN client are prompted for username/password
    ... establish the VPN connection,...that does not "log them onto the Domain". ... VPN,..but the actual domain authentication goes by their cached domain ... account,...so they don't get the prompt. ... When they do they are prompted for username/password. ...
    (microsoft.public.isa)
  • Re: Get inside a Windows Domain
    ... username/password to useinsidethatdomain, but I can't (inWindows ... thewindowsclient to always identify to thedomain. ... Pro, which *can* join thedomain. ... I have a group of machines that belong to a domain (for examploe, ...
    (microsoft.public.windowsxp.general)

Loading