RE: Access Denied from ActiveX object
From: Shawn Shepherd[MSFT] (shawnsh@microsoft.com)
Date: 01/24/03
- Next message: Lenny Burns: "IIS5 dumping ALL email with "Return-Path: <>"!!! HELP!!"
- Previous message: Keith W. McCammon: "Re: URLSCAN"
- In reply to: Tom Welch: "Access Denied from ActiveX object"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: shawnsh@microsoft.com (Shawn Shepherd[MSFT]) Date: Fri, 24 Jan 2003 19:32:11 GMT
Tom,
This article discusses this in detail:
258063 Internet Explorer May Prompt You for a Password
http://support.microsoft.com/?id=258063
There are quite a few conditions that must be met for NTLM to function
properly they are described here.
"Passing your user name and password to an Internet Information Services
(IIS) Web server is the responsibility of the Web browser. The following
scenarios describe the relationship between Internet Explorer and IIS in
regards to authentication."
The above article covers alot, but essentially if the route NTLM needs to
use to get to IIS is blocked (which it usually is on the net or complex
networks), then your choice is Basic, or for secure authentication Basic
over SSL.
Essentially NTLM is not going to work over the internet
This article describes how to use Client Certificates with Internet
Explorer.
313070 HOW TO: Configure Client Certificate Mappings in Internet Information
http://support.microsoft.com/?id=313070
"In IIS, you can authenticate users who log on with a client certificate by
mapping the certificates to Windows user accounts. The mapped certificates
are used to either deny access to Web resources, or grant rights and
permissions for the mapped user account. There are two methods in which to
map certificates:......"
Shawn Shepherd[MSFT]
MCSE/MCP+I
Online Support Professional
This posting is provided "AS IS" with no warranties, and confers no rights.
Get Secure! - www.microsoft.com/security
- Next message: Lenny Burns: "IIS5 dumping ALL email with "Return-Path: <>"!!! HELP!!"
- Previous message: Keith W. McCammon: "Re: URLSCAN"
- In reply to: Tom Welch: "Access Denied from ActiveX object"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
