Re: prompted for username, password on iis5 running xp pro

From: dsk (dmitrik@mindspring.com)
Date: 12/17/02 

From: "dsk" <dmitrik@mindspring.com>
Date: Tue, 17 Dec 2002 09:43:33 -0500

Ray,

Thanks for responding. I'm still not clear on the steps to resolve this
issue.
Someone suggested http://www.iisfaq.com/authentication/ might have the
answer.
First, if XP pro can only have one site, then the first step seems to be
making sure
this site is the only site, and not a subsite. How is that done?

Second, there seem to be 2 different places to edit properties where IIS
displays
the anonymous access dialog - The directory security tab under "Default Web
Site"
and the directory security tab under the virtual directory, in the tree
under Default web site.

Within the anonymous access, allow iis to control password is checked.
Authenticated
access is unchecked except for "Integrated windows authentication", which is
checked.
This dialog appears the same way under "Default Web Site" and under the
virtual site.

tia,
Dmitri

""Ray Hu [MSFT]"" <rayhu@online.microsoft.com> wrote in message
news:lpdQR0YpCHA.2580@cpmsftngxa09...
> Hi Dmitri,
>
> When you view the webpage, you must provide a credential (username and
> password) which the computer can identify. It can be a local user or a
user
> within any trusted domain. LSA checks the credential against local SAM
> database, the domain that the Web Server is a member of and all trusted
> domains.
>
> When you configure your website without anonymous access, when you visit
> the website, you will get a "401 authentication required". Then, IE and
Web
> Server will negociated an authentication method. If the user cannot input
> an valid username/password, the username/password box will be prompted for
> three times. After the user is authenticated, if the user has permission,
> the web server will send the content to the client. Otherwise, the
> webserver sends an 403 access denied error.
>
> If you use Windows Integrated Authentication, the scenario is as below:
>
> If your client computer is also a part of the domain, it will authenticate
> automatically.
> If your current credential on client computer is same as the credential on
> web server in local SAM, it will also be used automatically.
> Otherwise, you will be prompted to enter the username/password.
>
> If you use Basic Authentication, you must enter username/password
> explicitly. You can configure a default domain in IIS, so that your client
> doesn'y need to enter the domain name.
>
> IIS on Windows XP pro is IIS 5.1. The security features and architecture
of
> the Web Server in Windows 2000 Server and Windows XP Pro are same. The
> limitations of Windows XP Pro are: Only one website in XP pro, concurrent
> users cannot exceed 10, HTTP Compression are not available in XP pro, etc.
>
> Please let me know if this solves your problem or if you would like
further
> assistance.
>
> I look forward to hearing from you.
>
> Sincerely,
>
> Ray Hu
> Microsoft Online Support Engineer
>
> Get Secure! - www.microsoft.com/security
>
> =====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> =====================================================
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>

Relevant Pages

  • RE: prompted for username, password on iis5 running xp pro
    ... >Server will negociated an authentication method. ... >an valid username/password, the username/password box ... >the web server will send the content to the client. ... >the Web Server in Windows 2000 Server and Windows XP Pro ...
    (microsoft.public.inetserver.iis.security)
  • RE: Integrated Windows Authentication
    ... NTLM authentication, both of which are represented by Windows Integrated. ... to the resource is not a member of the same domain as the web server. ... |>Subject: Integrated Windows Authentication ...
    (microsoft.public.inetserver.iis.security)
  • Re: Windows XP Home Accessing Shared Folders on SBS
    ... Why doesn't everyone in the company use XP Pro? ... >> permission is accessibe without authentication from a Windows XP Home ... >> I want to ensure that only users that have domain user accounts on the ...
    (microsoft.public.windows.server.sbs)
  • Impersonation in Windows XP & Crystal Report 9
    ... Intranet using Visual Studio .Net on WIndows XP ... using is an Administrator on the web server (Windows XP ... Pro in this case). ... worker process user in machine.config file. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: FP versions inWindows XP
    ... Windows XP Pro, as XP Home does not support a web server. ... Microsoft MVP - FrontPage ...
    (microsoft.public.frontpage.client)