Re: IIS Challenge for Password. WinXP authenticates differently th

From: kbob287 (kbob287_at_discussions.microsoft.com)
Date: 05/24/05 

Date: Tue, 24 May 2005 12:22:15 -0700

What if I want the users to authenticate as username and the domain is
defaulted? I have already defaulted the directory in the directory security,
but it requires domain\username. Help??

"David Wang [Msft]" wrote:

> Let me reiterate what your question is:
> You want all users to automatically authenticate as their own
> domain\username to an IIS server.
>
> What you want is the way that it works by default. Nothing has really
> changed. You need to make sure:
> 1. All clients and servers are in a domain (or different domains, as long as
> you've established the cross-domain trusts)
> 2. Enabled only Integrated authentication on IIS (make sure anonymous access
> is disabled).
>
> When you have this configured, users just log onto their machines using
> their domain\username, and it automatically gets passed to IIS as
> domain\username. Works like this with NT4, W2K, XP, and WS03.
>
>
> If I've misunderstood your question, then please clarify what you mean by:
> > Windows XP tries to authenticate with IIS as
> > IIS_Machinename\Username
>
> Do you mean XP runs as IUSR_Machinename on IIS, or IIS_Machinename\Username
> ? Because the former means that the local user on XP is unrecognized on IIS
> (by-design -- machines not inside a domain have no knowledge of user
> accounts on other machines), so it authenticated as the anonymous user on
> IIS. The latter does not make any sense to me and would be something
> specific to your domain that you need to fix.
>
> --
> //David
> IIS
> http://blogs.msdn.com/David.Wang
> This posting is provided "AS IS" with no warranties, and confers no rights.
> //
> "Benjamin Chan" <bchan[nospam]@[nospam]controlproductsinc.com> wrote in
> message news:%23vLOgtSQFHA.4020@tk2msftngp13.phx.gbl...
> To Whom It May Concern:
>
> Problem:
> Windows XP tries to authenticate with IIS as IIS_Machinename\Username
>
> Where I'd like to get it to do it like Win2k used to do and authenticate
> with IIS as Domain\Username
>
> I recently migrated IIS from a domain controller where the way the WinXP
> machines authenticate would have worked. But all my users are untrained and
> I'd hate to send out a company wide e-mail telling people to start using
> Domainname\Username.
>
> If any of you know of some IIS setting I could change, or Group Policy
> setting or script I could run to change a setting please let me know.
>
> Regards,
> Benjamin Chan
>
>
>
>

Relevant Pages

  • Re: IIS Challenge for Password. WinXP authenticates differently th
    ... What IIS version. ... Integrated Authentication is going to require a domain. ... What if I want the users to authenticate as username and the domain is ... > When you have this configured, users just log onto their machines using ...
    (microsoft.public.inetserver.iis.security)
  • Re: Active Directory LDAP Authentication Fails in IIS 6
    ... in IIS 5.1) were: ... It seems you can't Authenticate using the Active Directory thats why you ... Public Function IsAuthenticated(ByVal domain As String, ... Dim entry As DirectoryEntry = New DirectoryEntry(_path, ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: ADSI Problem
    ... I suggest posting to IIS groups as well because if IIS will cause it to ... causing the script to stop working after it has been working. ... I have written a script to authenticate Active Directory users via ADSI ... Dim strUserName ...
    (microsoft.public.windows.server.active_directory)
  • Re: Authentication from a SAM base / IIS
    ... how are the ACLs in your web directory? ... which IIS version / which ASP.NET version? ... why FormsAuthentication API if you are doing Windows auth? ... authenticate against local or domain windows accounts. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: ADSI Problem
    ... Why not just let IIS authenticate the users? ... risks by joining the web server to the domain? ... Dim strUserName ...
    (microsoft.public.windows.server.active_directory)