Integrated Security Problems with ADO 2.8

From: Steve Newbery (newbesj_at_chevrontexaco.com)
Date: 07/15/04 

Date: 15 Jul 2004 02:09:49 -0700

We have a couple of Intranet web applications that use Office Web
Components, and logon is done using integrated security set to SSPI.

Our users have "Automatic logon only in Intranet zone" specified in
Zone 2 in their Internet Settings, and this worked fine and dandy -
until we installed MDAC 2.8.

Now the users get the security warning "This website is using your
identity to access a data source ...", and I'm having difficulty in
supressing that prompt. So far, the only way I found is to change the
logon setting in zone 2 (Local Intranet Zone) to "Automatically logon
with current username and password".

Two questions:

1. How come "Automatic logon only in Intranet zone" does not work
anymore in zone 2? Is this a bug or a design feature. It seems
illogical to me.

2. What implications for security are there in changing the logon
setting in zone 2? The problem is that users here can't change their
settings, so it would be a lot of work to apply the change - and we
might not het approval to do so.

Thanks, Steve

Relevant Pages

  • Re: Signing Into Sharepoint Site
    ... If you are in the Intranet and have the default IE Security / Logon settings of "Automatic logon only in Intranet zone" then you won't need to login again. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Windows Auth Problem
    ... Intranet zone". ... server I had to add http://devserver as a local intranet site. ... Automatic logon only in Intranet zone ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Windows Auth Problem
    ... Authentication" part in the Security Settings dialog: ... Automatic logon only in Intranet zone ... Automatic logon with current user name and password ... The default setting should be second one "Automatic logon only in Intranet ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Initiate shadow console session without local logon?
    ... you can configure Automatic Logon to logon these ... Double-click the DefaultPassword entry, type the password, and then ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Windows Integrated Authentication and Kerberos
    ... listed in "Intranet Zone", and Intranet Zone has the option to automatically ... I have a IIS Server on a member server. ... Successful Network Logon: ...
    (microsoft.public.inetserver.iis.security)