RE: Strange IIS Security issue

From: David Dietz [MS] (ddietz_at_online.microsoft.com)
Date: 09/09/03


Date: Tue, 09 Sep 2003 17:29:10 GMT


Clive,

This article should give you a solution to your issue:

303650 Intranet Site Is Identified as an Internet Site When You Use an FQDN
or
http://support.microsoft.com/?id=303650

Hope this helps.

David Dietz -- IIS Support Professional
Search our online Knowledge Base
http://support.microsoft.com/support/

This posting is provided “AS IS” with no warranties, and confers no rights.
You assume all risk for your use. © 2001 Microsoft Corporation. All rights
reserved

--------------------
|>Content-Class: urn:content-classes:message
|>From: "Clive Bryden" <c.bryden@richmond.gov.uk>
|>Sender: "Clive Bryden" <c.bryden@richmond.gov.uk>
|>Subject: Strange IIS Security issue
|>Date: Fri, 31 Jan 2003 08:17:56 -0800
|>Lines: 26
|>Message-ID: <053301c2c944$50628c30$8df82ecf@TK2MSFTNGXA02>
|>MIME-Version: 1.0
|>Content-Type: text/plain;
|> charset="iso-8859-1"
|>Content-Transfer-Encoding: 7bit
|>X-Newsreader: Microsoft CDO for Windows 2000
|>X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
|>Thread-Index: AcLJRFBiE6XRuoIHTqu5R+hHifPZ0g==
|>Newsgroups: microsoft.public.inetserver.iis.security
|>NNTP-Posting-Host: TK2MSFTNGXA02 10.40.1.51
|>Path: cpmsftngxa08!cpmsftngxa06
|>Xref: cpmsftngxa08 microsoft.public.inetserver.iis.security:14903
|>X-Tomcat-NG: microsoft.public.inetserver.iis.security
|>
|>I have a strange issue in IIS 5.0 (Win2000) that I am
|>seeking help with. I have a number of web sites (4)
|>within IIS that I'm running from one Windows 2000 server.
|>Some of the sites are set-up with Anonymous access which
|>is fine however I need to run one site (our Intranet
|>site) without Anonymous access so I have set-up this one
|>to use Integrated Windows Authentication. The problem is
|>that when users type http://intranet in a web browser
|>(explorer) it operates fine by allowing the user access
|>because they are already logged on to the network but
|>when they use http://intranet.companydomainname.com (the
|>FQDN) they are always requested to supply their User Name
|>and password? DNS is doing the resolution as its able to
|>resolve "intranet" and the domain name suffix is the same
|>on the DNS server. The tech articles (that I have found)
|>all point to the fact that a proxy server is being used,
|>which we don't have or that the authentication has not
|>been set-up which it has simply because it all works when
|>the FQDN is not used. Each site on the IIS server has its
|>own IP Address that has been bound to the NIC and the DNS
|>resolution has been set-up correctly for that FQDN to IP
|>address. The network is primarily NT 4.0 so there is no
|>Active Directory.
|>
|>Thank you in advance for your attention.
|>
|>



Relevant Pages

  • Re: Fixed but no idea why.
    ... Our topology is that the IIS SMTP server box is outside our firewall ... Do I not need to set the FQDN? ... itself as (EHLO/HELO hostname). ...
    (microsoft.public.inetserver.iis.smtp_nntp)
  • Re: Connect via ServerName but not by IP or FQDN
    ... I'd like my intranet clients to be able to connect ... How can I get it to resolve the FQDN for a SQL Server ... What do your intranet clients used to connect the SQL Server? ...
    (microsoft.public.sqlserver.connect)
  • Re: Windows authentication query
    ... Kerberos Authentication works find with FQDN. ... a client on the internet would not be able to connect to ... :> install IIS, only the NetBIOS name of the IIS server is registered with ...
    (microsoft.public.inetserver.iis.security)
  • Re: Windows authentication query
    ... Yes, ideally setting the SPN should be fine, but it did not work. ... > install IIS, only the NetBIOS name of the IIS server is registered with ... > FQDN) with the KDC. ... IIS server in the list of sites that would be available in the intranet. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Windows authentication query
    ... install IIS, only the NetBIOS name of the IIS server is registered with the ... FQDN) with the KDC. ... Delegation is succeeding only for users accounts residing in the same ... :> HOW TO: Configure Computer Accounts and User Accounts So That They Are ...
    (microsoft.public.inetserver.iis.security)