RE: prompted for username, password on iis5 running xp pro

From: Heather P (heather.peake@westnotts.ac.uk)
Date: 12/17/02 

From: "Heather P" <heather.peake@westnotts.ac.uk>
Date: Tue, 17 Dec 2002 07:00:35 -0800

What do we need to be looking at to make this work. We
have a site that prompts for user name three times as you
suggest but then responds with a 401.1 error page even
though the username/password/domain are correct.
Is the error in IIS or somewhere between user and IIS eg
the ISP.

Thanks Heather
>-----Original Message-----
>Hi Dmitri,
>
>When you view the webpage, you must provide a credential
(username and
>password) which the computer can identify. It can be a
local user or a user
>within any trusted domain. LSA checks the credential
against local SAM
>database, the domain that the Web Server is a member of
and all trusted
>domains.
>
>When you configure your website without anonymous
access, when you visit
>the website, you will get a "401 authentication
required". Then, IE and Web
>Server will negociated an authentication method. If the
user cannot input
>an valid username/password, the username/password box
will be prompted for
>three times. After the user is authenticated, if the
user has permission,
>the web server will send the content to the client.
Otherwise, the
>webserver sends an 403 access denied error.
>
>If you use Windows Integrated Authentication, the
scenario is as below:
>
>If your client computer is also a part of the domain, it
will authenticate
>automatically.
>If your current credential on client computer is same as
the credential on
>web server in local SAM, it will also be used
automatically.
>Otherwise, you will be prompted to enter the
username/password.
>
>If you use Basic Authentication, you must enter
username/password
>explicitly. You can configure a default domain in IIS,
so that your client
>doesn'y need to enter the domain name.
>
>IIS on Windows XP pro is IIS 5.1. The security features
and architecture of
>the Web Server in Windows 2000 Server and Windows XP Pro
are same. The
>limitations of Windows XP Pro are: Only one website in
XP pro, concurrent
>users cannot exceed 10, HTTP Compression are not
available in XP pro, etc.
>
>Please let me know if this solves your problem or if you
would like further
>assistance.
>
>I look forward to hearing from you.
>
>Sincerely,
>
>Ray Hu
>Microsoft Online Support Engineer
>
>Get Secure! - www.microsoft.com/security
>
>=====================================================
>When responding to posts, please "Reply to Group" via
your newsreader so
>that others may learn and benefit from your issue.
>=====================================================
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>
>.
>

Relevant Pages

  • RE: prompted for username, password on iis5 running xp pro
    ... Server will negociated an authentication method. ... an valid username/password, the username/password box will be prompted for ... the web server will send the content to the client. ... IIS on Windows XP pro is IIS 5.1. ...
    (microsoft.public.inetserver.iis.security)
  • Re: prompted for username, password on iis5 running xp pro
    ... First, if XP pro can only have one site, then the first step seems to be ... access is unchecked except for "Integrated windows authentication", ... you will get a "401 authentication required". ... > the web server will send the content to the client. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Securing Windows Media Encoder streams/broadcasts
    ... >>The security comment was in response to the previous posters comment about ... >>protecting a URL and feeding the video on a web site, ... > authentication system yourself - as the previous poster stated, ... your web server on the encoder client machine modifies the ...
    (microsoft.public.windowsmedia.encoder)
  • RE: DMZ and AD Authentication
    ... authentication, and then permitting them users to access the AD for ... thru is the web server was compromised. ... I would recommend using the Cisco Security Agent on the web ... >Subject: DMZ and AD Authentication ...
    (Security-Basics)
  • RE: website inside or outside the domain?
    ... it is better not to have domain authentication traffic ... publicly accessible web server in a DMZ, with a DC also in the DMZ ... > webserver is ... network) its not the best model to use. ...
    (Focus-Microsoft)