Re: disabling IIS login prompts

From: Bernard (qbernard_at_hotmail.com.discuss)
Date: 06/18/04


Date: Fri, 18 Jun 2004 15:31:33 +0800

I'm afraid not. if you using IIS authentication, by design, in local
intranet zone, IE auto login for user, hence no prompt. however, if error
during auth or user don't has permissin. IIS will chanllenge the user for
new user credential, hence IE prompt. there's no way you can 'modify' this
as. IE behave this way.

So to address you need, you might need to have own auth process. say store
in db, check session, if not login, redirect or etc.

Read this kb on how IIS authenticate browsers
INFO: How IIS Authenticates Browser Clients
http://support.microsoft.com/?id=264921

-- 
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/
"Ernie" <ebinney@sbcglobal.net> wrote in message
news:859d2366.0406171747.67bb1a2@posting.google.com...
> Thank you for your response, but this does not do exactly want we
> want.
>
> We have done that, but do not want the browser to prompt for a login.
> If the user is not already authenticated to the domain, then we do not
> want to prompt them for a login.  We redirect them to our external
> servers.
>
> If someone is connected to our network, but logged in locally to their
> computer then IIS will not authenticate them.  They will get a prompt.
>  We do not want that.  We want to capture that event before it sends a
> prompt and redirect them to our external servers.
>
> Thank you
>
>
> "Miha Pihler" <mihap-news@atlantis.si> wrote in message
news:<ez9mTrKVEHA.2920@TK2MSFTNGP10.phx.gbl>...
> > In IIS on your internal web site disable all other authentication
methods
> > (e.g. anonymous, basic) and leave only integrated checked...
> >
> > Mike
> >
> > "Ernie" <ebinney@sbcglobal.net> wrote in message
> > news:859d2366.0406171232.42dad36f@posting.google.com...
> > >I need to know if there is a way to disable the login prompt you get
> > > from IIS when you a have site set to Integrated Security?
> > >
> > > We have an Intranet and will turn on Integrated Security, but if they
> > > are logged onto their local machines instead of the domain then we do
> > > not want the prompt to come up.  We just want to capture that they
> > > were not authenticated and redirect them to our own login page.
> > >
> > > Thank you for your assistance.
> > >
> > > Ernie