security works for VPN users, doesnt for local

sorry for the near-dupe post (also in .security), but im desperately
trying to find an answer to this...

i am attempting to configure security for an intranet web application
in ASP.NET 2. it uses Windows authentication, retrieving roles from
our Active Directory. nothing too unusual.

what is unusual: it works for users that are VPN'ing into our network
from the outside (using cisco vpn), but DOESNT work for normal desktop
users in the office.

for both the browser (IE) pops up the windows login dialog. afterward
VPN users get in and i can see their name, check their
User.IsInRole("foo"), etc.. no problems. in-network users? cant
authenticate their credentials.. get this after 3 failed attempts:

HTTP Error 401.1 - Unauthorized: Access is denied due to invalid
credentials.
Internet Information Services (IIS)

....any ideas why?

Windows Server 2003, virtual directory under default website. in
"Directory Security" tab in IIS i have:

- unchecked "Enable anonymous access"

- checked "Integrated Windows authentication"

....my web.config of course uses the Windows authenication mode.



this is maddening! thanks for any help

sm
.

Relevant Pages

  • RE: Login Failure to Frontpage Admin
    ... compromise security to my websites and my server as the follwing procedure ... did popup a security message. ... My websites by default were ALL set to "Integrated Windows Authentication" ...
    (microsoft.public.frontpage.extensions.windowsnt)
  • IIS6.0 use anonymous and integrated security a the same time
    ... I set up a IIS 6.0 sever a while ago when we were young and innocent and decided to implement a few simple security baseline for the intranet web site: ... The problem is we don't share an active directory or any NT domain relationship at all, so I need to activate the anonymous access on the web site and if I do that, I cannot use the windows authentication anymore... ... continue using the IIS/NTFS authentication for my domain users OR still get the security information with the anonymous acces activated. ...
    (microsoft.public.inetserver.iis.security)
  • Re: security works for VPN users, doesnt for local
    ... What machine is the VPN machine? ... The web server by chance? ... it uses Windows authentication, retrieving roles from ... "Directory Security" tab in IIS i have: ...
    (microsoft.public.dotnet.framework.aspnet)
  • IIS & SQL Issues
    ... impersonation to run a page that accesses SQL Server via integrated ... I've set IIS security to ... integrated Windows authentication. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Brute Force
    ... Security reasons: ... Windows Authentication has certain benefits over SQL Server Authentication, ...
    (microsoft.public.sqlserver.security)