Re: User can't connect to particular webserver from his PC.

A reply I posted has not posted yet, not sure if it got lost or not, so
I am posting this again (apologies in advance if this ends up being a
duplicate).
The user was able to access the webserver when a test user account was
created for him, I thought this would be the case as other users were
able to access the webserver when logging on to his PC, and they were
all part of the same OU in active derectory. I currently have the user
checking the resultant set of polocies to see if the GPO is doing
something weird to his account on his computer, I beleive this to be
unlilkey as the only GPO linked to his account is an extremely basic
one. I was able to track down the webserver logon attemtps in the IIS
logs, which show something interesting (although I can't figure out why
obviusly). The logs show that when the user attempts to connect IE is
not passing over the users credentials (domain\userid + password). I
did some research on possible casues but was only able to find
information related to kerberos/integrated authentication being
cinfigured incorrectly. This is not the case as all other users are
able to access the server fine, and this user is able to access all
other servers fine, exept this one. I am including the lines from the
IIS log below:
You can see that right before the client IP there is no user
credentials....

Lines from C:\WINDOWS\system32\LogFiles\W3SVC1 logs
NOTE: first 2 sections of the IP#'s have been replaced with ***.*** for
privacy (paranoia:-))

2006-01-05 20:42:57 W3SVC1 ***.***.12.102 GET /orbitdashboard - 80 -
***.***.249.209
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+InfoPath.1)
401 2 2148074254
2006-01-05 20:42:57 W3SVC1 ***.***.12.102 GET /orbitdashboard - 80 -
***.***.249.209
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+InfoPath.1)
401 1 0
2006-01-05 20:42:57 W3SVC1 ***.***.12.102 GET /orbitdashboard - 80 -
***.***.249.209
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+InfoPath.1)
401 1 0
2006-01-05 20:43:14 W3SVC1 ***.***.12.102 GET /orbitdashboard - 80 -
***.***.249.209
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+InfoPath.1)
401 1 0
2006-01-05 20:43:14 W3SVC1 ***.***.12.102 GET /orbitdashboard - 80 -
***.***.249.209
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+InfoPath.1)
401 1 0
2006-01-05 20:43:16 W3SVC1 ***.***.12.102 GET /orbitdashboard - 80 -
***.***.249.209
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+InfoPath.1)
401 1 0
2006-01-05 20:43:16 W3SVC1 ***.***.12.102 GET /orbitdashboard - 80 -
***.***.249.209
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+InfoPath.1)
401 1 0
2006-01-05 20:43:16 W3SVC1 ***.***.12.102 GET /orbitdashboard - 80 -
***.***.249.209
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+InfoPath.1)
401 1 0
2006-01-05 20:43:17 W3SVC1 ***.***.12.102 GET /orbitdashboard - 80 -
***.***.249.209
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+InfoPath.1)
401 1 0

.

Relevant Pages

  • Re: FW: Trace of 139 attack?
    ... /complex—Forces passwords to have a mixture of upper ... > the admin account on local logins (physical security ... >> deleting the logs he cannot do it. ... >> ur Server ur logs will ...
    (Focus-Microsoft)
  • Re: what would happen if
    ... Using the same account to log into the same server causes many issues with ... Microsoft MVP - Terminal Server ... he/she could get either session. ... Typically, if user1 logs in as Joe, then ...
    (microsoft.public.windows.terminal_services)
  • Re: what would happen if
    ... Microsoft MVP - Terminal Server ... he/she could get either session. ... Typically, if user1 logs in as Joe, then ... the second person logs in using the *same* user account. ...
    (microsoft.public.windows.terminal_services)
  • Re: what would happen if
    ... Using the same account to log into the same server causes many issues with ... Microsoft MVP - Terminal Server ... he/she could get either session. ... Typically, if user1 logs in as Joe, then ...
    (microsoft.public.windows.terminal_services)
  • Re: Remote server and domain
    ... Think not, so keep the administratoraccount/password safe and create a second, maybe third admin account on it, so you can access it even when having problems with one account. ... we're planning to install a new Webserver machine to a remote ... All the servers are Windows Server 2008 Standard or Windows Server ...
    (microsoft.public.windows.server.general)