Re: Help please to authenticate Windows users

From: danielle (danielle_at_discussions.microsoft.com)
Date: 06/20/04


Date: Sun, 20 Jun 2004 11:18:02 -0700

David, thanks very much for your help. I will post tomorrow as soon as I have answers to your questions.

danielle

"David Wang [Msft]" wrote:

> Can you locate the web Log file entries corresponding to your requests which
> result in "Access Denied" and post it here. I need to know the HTTP sub
> status error code as well as Win32 error code -- I know the HTTP status code
> is 401.
>
> %SYSTEMROOT%\System32\LogFiles\W3SVC#\*.log
>
> The authentication methods you are using has very little to do with
> machine.config. This is all stuff that happens BEFORE reaching managed code
> and ASP.Net, so your configuration changes are pretty much useless. What
> you are doing is like trying to change your password by typing on the
> keyboard, but the computer isn't powered on yet -- so even though you typed
> on the keyboard, your password obviously isn't changed.
>
> Windows Authentication automatically works if the machines are joined to the
> same domain. If the web server is in the domain and your client machine is
> also in the domain, both computers will accept your domain user credential,
> as-is, using Windows Authentication.
>
> So, please describe:
> 1. Whether the machine running VS.Net is joined to the domain
> 2. Whether the machine running IIS is joined to the domain
> 3. Is VS.Net on the same machine as IIS
> 4. Is IIS on the same machine as the Domain Controller
>
> Honestly, all this stuff worked automatically for me when I installed VS.Net
> and IIS6 on separate or the same machine, default settings, where all
> machines were either stand-alone machines (so I made sure to have
> synchronized accounts between all the machines) or domain-machines. So, I'm
> curious to know where you are going astray.
>
> --
> //David
> IIS
> This posting is provided "AS IS" with no warranties, and confers no rights.
> //
> "danielle" <danielle@discussions.microsoft.com> wrote in message
> news:0000F25F-ABC2-4F3E-A742-CFCB57637138@microsoft.com...
> David thank you!
>
> You are right. But when I do only Integrated Windows then I can not get to
> the website at all, even to open solution in Visual Studio .NET. Windows
> authentication is not working. I changed even machine.config file attribute
> 'system' instead of 'machine' as process (article). Somehow IIS is not
> communicating with Active Directory or browsers are not passing server
> variables. :(
>
> In short: Access denied or you are not authorized to see pages when
> Integrated Windows only checked.
>
> thanks everyone for help
>
>
>
>
>



Relevant Pages

  • Re: Windows Authentication method on IIS6
    ... The microsoft.public.windows.server.* groups deal with Windows 2003 ... The microsoft.public.inetserver.* groups deal with IIS ... > the authentication button, ... You can configure either one or multiple realm names on a server running IIS ...
    (microsoft.public.win2000.security)
  • Re: How to access Windows IIS User Info with Perl
    ... but the IIS server is configured for Windows ... allowed for Basic Authentication, Windows Authentication (or whatever ... Do you know if they are part of a standard ...
    (comp.lang.perl.misc)
  • Windows Authentication with IIS on separate machines
    ... Yes, setting Basic Authentication in IIS works, but the ... >in SQL server but doesn't work if user account was ... >imported from a Windows account. ...
    (microsoft.public.sqlserver.security)
  • Re: Change in ASP.Net authentication between Win2000 and Win2003
    ... IIS Resource Guide). ... I next looked a little into Windows 2003. ... IMHO, the label on the option, "Enable Integrated Windows Authentication", ... the documentation leads one to ...
    (microsoft.public.windows.server.security)
  • Re: Change in ASP.Net authentication between Win2000 and Win2003
    ... IIS Resource Guide). ... I next looked a little into Windows 2003. ... IMHO, the label on the option, "Enable Integrated Windows Authentication", ... the documentation leads one to ...
    (microsoft.public.inetserver.iis.security)