IIS Authentication Issue

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Doug (anonymous_at_discussions.microsoft.com)
Date: 02/04/05 

Date: Thu, 3 Feb 2005 21:52:52 -0800

Solved.
Using
cscript adsutil.vbs set w3svc/NTAuthenticationProviders "NTLM"
So it was Kerberos. Fortunately there is nothing else on
the same box that requires it. It seems that the
authentication became broken after applying one of the
recent MS security patches as the problem only started
occurring after a recent "Patch Tuesday".
>-----Original Message-----
>We have IIS 6 running on an Exchange 2003 server (Win2K3)
>with an extension called Public Folder Viewer. All users
>can access the website but when a topic is expanded and a
>link to a subject is clicked on a Windows authentication
>dialogue appears entitled "Connect to
><NameOfExchangeServer>.company.com.au".

>I wouldn't have thought that it was a kerberos issue as the
>IIS server and Exchange server are the same box.

Relevant Pages

  • Re: Integrated Windows Authentication Timeout?
    ... Is it possible that a different host name is being used for one of the subsequent requests that would break Kerberos auth? ... If you have "Negotiate" authentication set in the metabase, then this can still negotiate down to NTLM if for some reason the protocol thinks that Kerberos is unavailable. ... server. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Event log shows NTLM not Kerberos
    ... it needs those SIDs, which is what authentication gives. ... Authentication Package: NTLM ... Authentication Package NTLM not Kerberos? ...
    (microsoft.public.security)
  • RE: Correct Domain User/Pass/Domain credentials rejected
    ... Authentication" checked vs. unchecked is that if it's unchecked, ... use NTLM or Kerberos, and Kerberos usually ends up being the winner. ... you can force IIS to only use NTLM: ...
    (microsoft.public.inetserver.iis.security)
  • Re: AD Authentication
    ... My understanding is that if two machines are members of the same domain then they will use kerberos not LM, NTLM, or NTLMv2. ... I realize that some of the mmc snap ins and ie web browse will use NTLM authentication but when mapping a drive it should be using kerberos right? ...
    (microsoft.public.win2000.active_directory)
  • Re: Event log shows NTLM not Kerberos
    ... so this is for a network login. ... Authentication Package: NTLM ... Authentication Package NTLM not Kerberos? ...
    (microsoft.public.security)