Re: Please enter password for HTTP proxy

Hi bzyf,

Thanks for your update.

To narrow down the problem, would you please try the following steps?

1. On problematic client, open IE and then click Internet Options on Tools
menu.
2. Click connection tab and then click LAN Settings.
3. Make sure you have not selected Automatically detect settings and Use
automatic configuration script.
4. Clear the Exceptions and then click OK.
5. Click Advanced tab on Internet Options.
6. Make sure you have selected Enable Integrated Windows Authentication.
7. Try to see if the problem still occurs.

If the issue still occurs, please let me know the result of clean boot and
also help me collect the ISA log:

1. Open ISA Management, and then point to Monitoring Configuration | Logs
2. Double click ISA Server Firewall Service in the right pane, click to
select Enable Logging for this service, click Fields tab, click Select All,
and then click OK.
3. Please repeat Step 2) to enable logging IP Packet Filter and Web Proxy
Services.
4. Run command "net stop isactrl" (without the quotation marks) to stop all
ISA Services.
5. Backup all files in the folder C:\Program Files\Microsoft ISA
Server\ISALogs, and then delete them.
6. In ISA Management | <server name> | Monitoring | Services, start all ISA
services.
7. Reproduce the issue.
8. Wait for about 3 minutes, and then send that day's firewall, web proxy
and IP Packet filter log below in C:\Program Files\Microsoft ISA
Server\ISALogs to me at v-crinal@xxxxxxxxxxxxx:

Firewall log: FWSEXTDyyyymmdd.log
Web Proxy log: WEBEXTDyyyymmdd.log
IP Packet Filter log: IPPEXTDyyyymmdd.log

9. Please also let me know the IP address of the testing client so that I
can filter the data.

I appreciate your time and look forward to hearing from you.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: bzyf <bzyfon@xxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| Subject: Re: Please enter password for HTTP proxy
| Date: Mon, 20 Mar 2006 23:37:06 -0800
| Organization: Posted via Supernews, http://www.supernews.com
| Message-ID: <121vb937nfqqd65@xxxxxxxxxxxxxxxxxx>
| User-Agent: Thunderbird 1.5 (Windows/20051201)
| MIME-Version: 1.0
| References: <121pc6mhnfteq9f@xxxxxxxxxxxxxxxxxx>
<8LGgDW$SGHA.7904@xxxxxxxxxxxxxxxxxxxxx>
| In-Reply-To: <8LGgDW$SGHA.7904@xxxxxxxxxxxxxxxxxxxxx>
| Content-Type: text/plain; charset=ISO-8859-1; format=flowed
| Content-Transfer-Encoding: 7bit
| X-Complaints-To: abuse@xxxxxxxxxxxxx
| Lines: 271
| Path:
TK2MSFTNGXA03.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!newshub.sdsu.edu!router2.astraweb.com!mrouter.astraweb.com!news.astraw
eb.com!router1.astraweb.com!sn-xt-sjc-04!sn-xt-sjc-07!sn-post-01!supernews.c
om!corp.supernews.com!not-for-mail
| Xref: TK2MSFTNGXA03.phx.gbl microsoft.public.windows.server.sbs:254527
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi,
|
| Thank you for Your prompt answer
|
| I got no luck :(
|
| I reply inline:
|
| Crina Li wrote:
| > Hi bzyf,
| >
| > Thank you for posting in SBS newsgroup.
| >
| > I am sorry for the delayed response due to weekend. Please understand
that
| > the newsgroups are staffed weekdays by Microsoft Support professionals
to
| > answer your systems and applications questions. Your understanding is
| > greatly appreciated!
| >
| > From your post, my understanding on this issue is: A few of the
computers
| > is having a problem where it is being asked to authenticate to the
proxy
| > server when trying to use internet or Outlook, even though they are
logged
| > on to the SBS server that hosts the ISA. If I have misunderstood your
| > concern, please feel free to let me know.
| >
| > To narrow down the problem, would you please help me collect the
following
| > information?
| >
| > 1. Compare the IE settings to make sure the problematic clients are the
| > same as the good ones. Find a good computer, start IE, click
| > Tools->Internet Options, click the Connections tab, click the LAN
Settings
| > button, write down the settings on this page, click Advanced and then
wring
| > down the settings. Compare the same settings on the problematic clients
and
| > then correct them. Does the issue disappear?
|
| Setting for both good and problematic are almost the same:
|
| Use proxy for your lan.... checked
|
| Address: MMSERVER port: 8080
|
| Bypass proxy server for local.... checked
|
| in Advanced:
|
| HTTP: MMSERVER : 8080
| ===
| ===
| === same
| ===
| ===
|
| Use the same proxy server for all.. checked
|
| the only difference is: problematic has Exeptions
|
| Do not use proxy for addresses beginning with
|
| ;localhost
|
| When I clear this Proxy alert still pop ups
| and this Exeption is back after I logoff/logon
|
|
|
|
| > 2. Have the other good clients installed ISA Firewall Client? If so,
make
| > sure the problematic clients also have Firewall Client installed. If
the
| > problematic clients have ISA 2000 Firewall Client installed, uninstall
it
| > and then reinstall the ISA 2000 Firewall Client.
|
| Both good and bad client have installed ISA Firewall Client.
| Uninstalling and reinstalling it does not help.
|
|
| > 3. Make sure the users logon the domain on the problematic clients.
This
| > issue can occur if the users do not log on the domain and they use the
| > computer local user accounts.
|
| I find in system Properties => Computer Names that Primary Dns Suffix
| field is empty so I correct this. This changed full computer name to
| JUREKG01.MM.local ( on "good" one this is ANNAG01.MM.local)
|
| I also restart DHCP and find both clients in there.
|
| >
| > Also please double check network configuration on SBS and client
computer:
| >
| > On SBS server:
| >
| > External NIC:
| > IP: assigned by your ISP or your hardware router
| > Gateway: your ISP or your Hardware router IP
| > DNS: SBS INTERNAL NIC IP as the only entry
| >
| > Internal NIC:
| > IP: Fixed IP
| > Gateway: None
| > DNS: SBS INTERNAL NIC IP as the only entry
|
|
| SERVER IPCONFIG:
|
| Windows IP Configuration
|
|
|
| Host Name . . . . . . . . . . . . : mmserver
|
| Primary Dns Suffix . . . . . . . : MM.local
|
| Node Type . . . . . . . . . . . . : Unknown
|
| IP Routing Enabled. . . . . . . . : Yes
|
| WINS Proxy Enabled. . . . . . . . : Yes
|
| DNS Suffix Search List. . . . . . : MM.local
|
|
|
| Ethernet adapter Server Local Area Connection:
|
|
|
| Connection-specific DNS Suffix . :
|
| Description . . . . . . . . . . . : NETGEAR FA311/312 PCI Adapter
|
| Physical Address. . . . . . . . . : 00-02-E3-02-9F-CC
|
| DHCP Enabled. . . . . . . . . . . : No
|
| IP Address. . . . . . . . . . . . : 192.168.0.2
|
| Subnet Mask . . . . . . . . . . . : 255.255.255.0
|
| Default Gateway . . . . . . . . . :
|
| DNS Servers . . . . . . . . . . . : 192.168.0.2
|
| Primary WINS Server . . . . . . . : 192.168.0.2
|
|
|
| Ethernet adapter Internet:
|
|
|
| Connection-specific DNS Suffix . :
|
| Description . . . . . . . . . . . : Realtek RTL8139 Family PCI Fast
| Ethernet NIC
|
| Physical Address. . . . . . . . . : 00-05-5D-34-B3-99
|
| DHCP Enabled. . . . . . . . . . . : No
|
| IP Address. . . . . . . . . . . . : 192.168.1.10
|
| Subnet Mask . . . . . . . . . . . : 255.255.255.0
|
| Default Gateway . . . . . . . . . : 192.168.1.1
|
| DNS Servers . . . . . . . . . . . : 192.168.0.2
|
| NetBIOS over Tcpip. . . . . . . . : Disabled
|
| >
| > In the DNS console (dnsmgmt.msc), right click your ServerName and click
| > properties. In the Forwarders tab, your ISP DNS server IP should be
| > inputted there.
| >
|
| Everything correct there.
|
|
| > On workstation inside your SBS local subnet
|
| Bad client IPCONFIG
|
|
| Windows IP Configuration
|
|
|
| Host Name . . . . . . . . . . . . : JUREKG01
|
| Primary Dns Suffix . . . . . . . : MM.local
|
| Node Type . . . . . . . . . . . . : Hybrid
|
| IP Routing Enabled. . . . . . . . : No
|
| WINS Proxy Enabled. . . . . . . . : No
|
| DNS Suffix Search List. . . . . . : MM.local
|
| MM.local
|
|
|
| Ethernet adapter Local Area Connection:
|
|
|
| Connection-specific DNS Suffix . : MM.local
|
| Description . . . . . . . . . . . : 3Com 3C910 Integrated Fast
| Ethernet Controller (3CSOHO100B-TX Compatible)
|
| Physical Address. . . . . . . . . : 00-0A-48-02-FA-7C
|
| Dhcp Enabled. . . . . . . . . . . : Yes
|
| Autoconfiguration Enabled . . . . : Yes
|
| IP Address. . . . . . . . . . . . : 192.168.0.148
|
| Subnet Mask . . . . . . . . . . . : 255.255.255.0
|
| Default Gateway . . . . . . . . . : 192.168.0.2
|
| DHCP Server . . . . . . . . . . . : 192.168.0.2
|
| DNS Servers . . . . . . . . . . . : 192.168.0.2
|
| Primary WINS Server . . . . . . . : 192.168.0.2
|
| Lease Obtained. . . . . . . . . . : Monday, March 20, 2006
| 9:56:27 PM
|
| Lease Expires . . . . . . . . . . : Sunday, March 26, 2006
| 9:56:27 PM
| >
| > IP: Assigned by DHCP on SBS
| > Gateway: SBS internal NIC IP
| > DNS: SBS INTERNAL NIC IP as the only entry
| >
| > If the problem still persists, please perform a clean boot on
problematic
| > client as following:
| >
| > 1. Click Start, click Run, and then in the Open box, type "MSCONFIG"
| > (without the quotation marks). Click OK.
| > 2. In the System Configuration Utility (MSConfig) window, click to
select
| > the Selective Startup button.
| > 3. Click to clear the check mark from the "Load startup items" below
| > Selective Startup.
| > 4. Click the Services tab, click to check the "Hide All Microsoft
Services"
| > box, and remove all the check marks from the remained Non-Microsoft
| > Services. Please note that the Exchange services could be marked as
| > non-Microsoft. Please do not disable those services.
| > 5. Click OK to close the MSConfig window. Click Yes when you are asked
to
| > restart your computer in order to enable the changes.
| > 6. After restarting, please check whether this issue will reoccur.
|
| Sorry to late to run this
|
|
| >
| > Please do not hesitate to let me know if you have any questions or
concern.
| >
| > I appreciate your time and look forward to hearing from you.
| >
| > Best regards,
| >
| > Crina Li (MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
|

.