Re: IIS Challenge for Password. WinXP authenticates differently th

From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: 05/26/05 

Date: Thu, 26 May 2005 07:49:34 -0700

What IIS version.
What Authentication Protocol.

By design, Integrated Authentication is going to require a domain. But if
you configured it properly, Integrated Authentication should not result in a
popup. 

-- 
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"kbob287" <kbob287@discussions.microsoft.com> wrote in message
news:89A54696-C24E-47A8-80AA-4080512B15D0@microsoft.com...
What if I want the users to authenticate as username and the domain is
defaulted?  I have already defaulted the directory in the directory
security,
but it requires domain\username.  Help??
"David Wang [Msft]" wrote:
> Let me reiterate what your question is:
> You want all users to automatically authenticate as their own
> domain\username to an IIS server.
>
> What you want is the way that it works by default. Nothing has really
> changed. You need to make sure:
> 1. All clients and servers are in a domain (or different domains, as long
as
> you've established the cross-domain trusts)
> 2. Enabled only Integrated authentication on IIS (make sure anonymous
access
> is disabled).
>
> When you have this configured, users just log onto their machines using
> their domain\username, and it automatically gets passed to IIS as
> domain\username. Works like this with NT4, W2K, XP, and WS03.
>
>
> If I've misunderstood your question, then please clarify what you mean by:
> > Windows XP tries to authenticate with IIS as
> > IIS_Machinename\Username
>
> Do you mean XP runs as IUSR_Machinename on IIS, or
IIS_Machinename\Username
> ? Because the former means that the local user on XP is unrecognized on
IIS
> (by-design -- machines not inside a domain have no knowledge of user
> accounts on other machines), so it authenticated as the anonymous user on
> IIS. The latter does not make any sense to me and would be something
> specific to your domain that you need to fix.
>
> -- 
> //David
> IIS
> http://blogs.msdn.com/David.Wang
> This posting is provided "AS IS" with no warranties, and confers no
rights.
> //
> "Benjamin Chan" <bchan[nospam]@[nospam]controlproductsinc.com> wrote in
> message news:%23vLOgtSQFHA.4020@tk2msftngp13.phx.gbl...
> To Whom It May Concern:
>
> Problem:
> Windows XP tries to authenticate with IIS as IIS_Machinename\Username
>
> Where I'd like to get it to do it like Win2k used to do and authenticate
> with IIS as Domain\Username
>
> I recently migrated IIS from a domain controller where the way the WinXP
> machines authenticate would have worked. But all my users are untrained
and
> I'd hate to send out a company wide e-mail telling people to start using
> Domainname\Username.
>
> If any of you know of some IIS setting I could change, or Group Policy
> setting or script I could run to change a setting please let me know.
>
> Regards,
> Benjamin Chan
>
>
>
>

Relevant Pages

  • Re: IIS Challenge for Password. WinXP authenticates differently th
    ... What if I want the users to authenticate as username and the domain is ... I have already defaulted the directory in the directory security, ... > domain\username to an IIS server. ... > accounts on other machines), so it authenticated as the anonymous user on ...
    (microsoft.public.inetserver.iis.security)
  • Re: Active Directory LDAP Authentication Fails in IIS 6
    ... in IIS 5.1) were: ... It seems you can't Authenticate using the Active Directory thats why you ... Public Function IsAuthenticated(ByVal domain As String, ... Dim entry As DirectoryEntry = New DirectoryEntry(_path, ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: ADSI Problem
    ... I suggest posting to IIS groups as well because if IIS will cause it to ... causing the script to stop working after it has been working. ... I have written a script to authenticate Active Directory users via ADSI ... Dim strUserName ...
    (microsoft.public.windows.server.active_directory)
  • Re: Authentication from a SAM base / IIS
    ... how are the ACLs in your web directory? ... which IIS version / which ASP.NET version? ... why FormsAuthentication API if you are doing Windows auth? ... authenticate against local or domain windows accounts. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: ADSI Problem
    ... Why not just let IIS authenticate the users? ... risks by joining the web server to the domain? ... Dim strUserName ...
    (microsoft.public.windows.server.active_directory)