Re: ISA Integrated authentication prompting for user / password

From: Me (reply_in_at_newsgroup.only)
Date: 11/03/04 

Date: Tue, 2 Nov 2004 21:03:48 -0500

We've had this happen a lot on XP boxes. They seem to lose their secure
channel to the NT domain controller. When you look in Computer management at
the members of any local group, like Administrators, all you see are SIDs.

Removing the computer from the domain, rebooting and re-adding to the NT
domain and rebooting again fixes the SID issue and also stops the credential
prompting.

It never happens on 2K Pro boxes.

FWIW,

Ray

"Fnook" <fnook@fnook.com> wrote in message
news:52bfda99.0411021129.612ac088@posting.google.com...
> We've been trying to lock out some applications such as MSN messenger
> and also want to display in the logs the user name of each person
> instead of just recording anon access. I've followed some of the
> tutorials at Isaserver.org including the one about dangerous
> applications.
>
> Every time I enable "ask unauthenticated users for identification" it
> seems to work for a while, we have web access, msn is banned, and
> everything works ok.
>
> Then we start to have problems (time varies from a few mins to the
> next day).
> The main one is that users keep getting prompted for authentication
> every time they try to access a web page. I am using integrated
> authentication on the ISA server, so surely this should not happen?
>
> ISA server 2000 SP1, FP1 on Windows 2000 server.
>
> Can anyone help?
>
> TIA,
>
> Jo

Relevant Pages

  • Re: Ex07 Hell
    ... I now am seeing this in the event log on one of the boxes. ... Enable-ExchangeServerCertificate -Thumprint EE6D6B SMTP ... Currently both servers have "Exchange Server authentication" and ...
    (microsoft.public.exchange.admin)
  • Re: NT User created programatically, authenticating with IIS fails
    ... which didnt allow authentication. ... enantiomer wrote: ... I have given permissions on the directory to a group ... My problem is when I create a user manually through Computer Management ...
    (microsoft.public.dotnet.framework)
  • Re: User Authentication using Sockets !
    ... > authentication with using sockets. ... > our passwds on the boxes age out that option is not possible. ... > Next option would be to use sockets and tranfer the file across. ... > However the problem is security. ...
    (comp.lang.java.programmer)
  • Re: Default IIS Domain
    ... Also, this is only the case on the FE servers, the dialog boxes are ... >>authentication dialog is greyed out. ... > you make to the leabase are 'lost'. ...
    (microsoft.public.exchange.admin)
  • Re: WebDAV and permissions
    ... > I have it set to Windows Integrated Authentication. ... > that user from Domain_Admins I can no longer login. ... I get a dialog box with 3 boxes and I log in just ... Integrated Windows Authentication requires that a user has the "Access ...
    (microsoft.public.inetserver.iis.security)