Re: ISA prompts for credentials for intranet ONLY in Terminal Services

OK. From your description this does not seem to be a Terminal Server issue
per se, rather an user authentication issue. Am I correct that the accounts
used for logon to the Terminal Server are not the same accounts used on the
users' desktops?

If that is the case, then the prompt is normal because in your ISA you
probably have an access rule allowing HTTP access only to members of your
"Internet Users" group, whose membership does not include the TS accounts.

What you could do is create a new access rule for HTTP, only for your
internal IP/website, that allows anonymous HTTP access from the address of
your TS (in other words, make the rule available to "All Users" instead of
"Internet Users"). Place this new rule on top of the other one (the one for
"Internet Users"), and it should work.

Virgil



"Radiohe4d" <Radiohe4d@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:39D693C4-0C87-4B62-89D4-8C30A6F408F0@xxxxxxxxxxxxxxxx
> Every time a user logs into a Terminal Server session and tries to access
> the intranet, they get the proxy authentication prompt. If they browse the
> intranet from their desktop, they don't get prompted.
>
> So far i have worked out that the reason this is happening is when
> they log on to a Terminal Server, their session sees the intranet page as
> EXTERNAL. If i make users part of the "Internet Users" group so they can
> have
> external access, the intranet suddenly works and no prompt comes up.
>
> You can cancel the login and the page still loads, but then when you click
> on any
> link on the page the login prompt comes back and the next page loads in
> the
> background again. You have to keep cancelling the prompt every time you go
> to a new page.
>
> If you actually try entering username and password details, it only works
> if
> the
> account you've entered is a member of "internet users". Any other accounts
> fail
> and the prompt comes back immediately.
>
> As i said before, this is not a problem on their desktops, only when they
> log into
> a Terminal Server session and browse from there. Why would the intranet be
> treated as "external" rather than "internal"??
>
> PLEASE HELP!!!


.

Relevant Pages

  • Re: Saving Username and Password in Remote Desktop Client
    ... So you are using these multiple accounts as a safety technique? ... Locking Down Windows Server 2003 Terminal Server Sessions ... in the rdp file on the client, instead of configuring it in the ...
    (microsoft.public.windows.terminal_services)
  • Re: Multiple Applications on TS
    ... Why on earth would you want to maintain local accounts, ... MCSE, CCEA, Microsoft MVP - Terminal Server ... > server,the group policy is not in effect.Is group policy meant ...
    (microsoft.public.windows.terminal_services)
  • Re: gnome-terminal annoyance
    ... On January 22, 2004 08:47 am, Michael Sullivan wrote: ... > accounts the day before. ... > account after restoring the settings I opened gnome-terminal and the ... Every other time I've logged in since then the prompt says ...
    (RedHat)
  • RE: Cannot save save email password error 0x800CCC92
    ... the settings, especially near the bottom, at User Authentication" then ... some other changes to "Prompt" for other selections above that one, ... mail accounts there and the same thing happens. ...
    (microsoft.public.outlook.installation)
  • Re: Find Data Source Error Word and Excel 2003
    ... You are correct in that we are using Terminal Server. ... >I'm not aware of any of the methods producing temp ... >Peter Jamieson - Word MVP ... >> and two of the files work great on everyones accounts. ...
    (microsoft.public.word.mailmerge.fields)
Loading