Re: Help please to authenticate Windows users

From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: 06/20/04 

Date: Sun, 20 Jun 2004 04:18:14 -0700

Can you locate the web Log file entries corresponding to your requests which
result in "Access Denied" and post it here. I need to know the HTTP sub
status error code as well as Win32 error code -- I know the HTTP status code
is 401.

%SYSTEMROOT%\System32\LogFiles\W3SVC#\*.log

The authentication methods you are using has very little to do with
machine.config. This is all stuff that happens BEFORE reaching managed code
and ASP.Net, so your configuration changes are pretty much useless. What
you are doing is like trying to change your password by typing on the
keyboard, but the computer isn't powered on yet -- so even though you typed
on the keyboard, your password obviously isn't changed.

Windows Authentication automatically works if the machines are joined to the
same domain. If the web server is in the domain and your client machine is
also in the domain, both computers will accept your domain user credential,
as-is, using Windows Authentication.

So, please describe:
1. Whether the machine running VS.Net is joined to the domain
2. Whether the machine running IIS is joined to the domain
3. Is VS.Net on the same machine as IIS
4. Is IIS on the same machine as the Domain Controller

Honestly, all this stuff worked automatically for me when I installed VS.Net
and IIS6 on separate or the same machine, default settings, where all
machines were either stand-alone machines (so I made sure to have
synchronized accounts between all the machines) or domain-machines. So, I'm
curious to know where you are going astray. 

-- 
//David
IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"danielle" <danielle@discussions.microsoft.com> wrote in message
news:0000F25F-ABC2-4F3E-A742-CFCB57637138@microsoft.com...
David thank you!
You are right.  But when I do only Integrated Windows then I can not get to
the website at all,  even to open solution in Visual Studio .NET.  Windows
authentication is not working.  I changed even machine.config file attribute
'system' instead of 'machine' as process (article). Somehow IIS is not
communicating with Active Directory or browsers are not passing server
variables.  :(
In short: Access denied or you are not authorized to see pages when
Integrated Windows only checked.
thanks everyone for help

Relevant Pages

  • HTTP 401.3 Unauthorized due to access control list (ACL) on resource - Oddity (reproducable)
    ... Windows XP / IIS 5.1 ... due to access control list on resource" on my IIS instance. ... If I do not give a username and password, ... Essentially, once I log on using windows authentication, some process ...
    (microsoft.public.inetserver.iis.security)
  • RE: Plaese help a newbie with data access
    ... I assume that the IIS is set up to use Windows Authentication (with anonymous ... This will not suffice if the web server and SQL Server are on different ...
    (microsoft.public.dotnet.general)
  • Deny a User Group with Anonymous Enabled
    ... My company Intranet has "Anonymous" checked/enabled under IIS ... "Use Windows Authentication" is checked as well. ... What I found if a user in "redgroup" tries to access ...
    (microsoft.public.inetserver.iis.security)
  • Re: Can I force a Windows Authentication / Login?
    ... For forcing the clientuser pass the windows authentication logon, ... we can use the IIS server's windows integrated ... windows authentication(disable anonymous access) which will force the ...
    (microsoft.public.dotnet.framework.aspnet)
  • set configuration database server
    ... I want to use Windows Authentication for Set configuration ... Authentication Account), but it seem never work for me. ... (Error code: 18456). ...
    (microsoft.public.sharepoint.windowsservices)