Re: HTTP 401.2 Error resolving FQDN

From: Kristofer Gafvert (kgafvert_at_NEWSilopia.com)
Date: 05/13/04


Date: Thu, 13 May 2004 22:30:17 +0200

Does the users belong to different domains?

It sounds like the problem is not with IIS (since it is working if you
manually login via the logon box), so i think that you might get better
support from one of the Internet Explorer groups.

Here's a list of reasons why you are asked for credentials, maybe something
of that helps you:

[258063] Internet Explorer May Prompt You for a Password
http://support.microsoft.com/?id=258063

-- 
Regards,
Kristofer Gafvert - IIS MVP
http://www.ilopia.com - When you need help!
"stephen" <anonymous@discussions.microsoft.com> wrote in message
news:B12914C6-A9FD-4CC6-9F48-05B82147D6F1@microsoft.com...
> The web application strictly uses NTLM authentication. It is completely
seamless. The user should never be prompted for any credentials. The
database that the application uses stores a record that has an entry for
each user accessing the web site along with their respective NT credentials.
So when the users hits the web site, it compares their NT credentials with
an entry in the database to verify that the user is valid. If the user's NT
account doesn't exist in the database then they get a different message
specific to the application itself that the user account could not be found.
Otherwise they are automatically able to access the web site.
>
> If the user manually enter the credentials the dialog box they are able to
access the site. Based on your recommendation I was able to duplicate the
error if the web site was not in the Trusted Sites list. From what I can
tell there is a Windows 2000 Group Policy Setting that could add this site
to the Trusted Sites list in Internet Explorer for all PCs in the domain:
> Group Policy -> User Configuration -> Windows Settings -> Internet
Explorer Maintenance -> Security -> Security Zones and Content Ratings
>
> But the strange thing is that since most people can hit this URL, either
practically everyone has a low security setting for Local Intranet sites to
allow them to hit the site or it's already in their Trusted Sites (which is
somewhat doubtful since i've never instructed anyone to do this).
>
>


Relevant Pages

  • RE: "You are not authorized to view this page" keeps popping up.
    ... > credentials you supplied. ... > to contact the Web site by using any e-mail address or phone number that may ... > HTTP Error 403 - Forbidden ... > Internet Explorer. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • http 403
    ... You might not have permission to view this directory or ... page using the credentials you supplied. ... please try to contact the Web site by using any ... Internet Explorer ...
    (microsoft.public.frontpage.programming)
  • error 403
    ... When I try to access this website I get this error. ... page using the credentials you supplied. ... please try to contact the Web site by using any ... Internet Explorer ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Searching problems
    ... search button and when the search window comes up I get ... >credentials you supplied. ... >to contact the Web site by using any e-mail address or ... >Internet Explorer ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • [NT] Cumulative Security Update for Internet Explorer (MS06-021)
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Get your security news from a reliable source. ... Improper memory and user input handling with Internet Explorer allows ... A remote code execution vulnerability exists in the way Internet Explorer ...
    (Securiteam)