Re: IIS authentication problems

On 6 Jun, 11:31, v-ter...@xxxxxxxxxxxxxxxxxxxx (Terence Liu [MSFT])
wrote:
Hello Dave,

Thank you for kind update.

I checked your metabase. The default website did not enable the anonymous
access. It is incorrect, I suggest you enable it.

Meanwhile, you do not tell me which webpage has access issue. Please let me
know it. I will check the directory security in the metabase.

Note: If the webpage is customized by yourself, we do not support in SBS
newsgroup, please try to repost your issue in IIS newsgroup.

As you mentioned "Does directory security placed up at the default web site
level inherit down to any webpages/apps underneath?", you can modify the
directory security of default web site, when you click OK to apply the
settings, you will be asked whether apply the settings on the subfolders.

Additional, if you install ISA server on SBS, please install ISA firewall
client on the internal client computer to provide credentials to SBS.

Hope these steps will give you some help.

Thanks and have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! -www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
checkhttp://support.microsoft.comfor regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: Dave P <Davey.Proc...@xxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| Subject: Re: IIS authentication problems
| Date: Tue, 05 Jun 2007 11:21:05 -0700
| Organization:http://groups.google.com
| Lines: 186
| Message-ID: <1181067665.596151.304...@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <1180984040.966768.27...@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
| <Xj9JFP1pHHA.2...@xxxxxxxxxxxxxxxxxxxxxx>
| <1181046358.776720.243...@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| NNTP-Posting-Host: 82.163.107.234
| Mime-Version: 1.0
| Content-Type: text/plain; charset="us-ascii"
| X-Trace: posting.google.com 1181067665 19988 127.0.0.1 (5 Jun 2007
18:21:05 GMT)
| X-Complaints-To: groups-ab...@xxxxxxxxxx
| NNTP-Posting-Date: Tue, 5 Jun 2007 18:21:05 +0000 (UTC)
| In-Reply-To: <1181046358.776720.243...@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| User-Agent: G2/1.0
| X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.2; en-GB;
rv:1.8.0.11) Gecko/20070312 Firefox/1.5.0.11,gzip(gfe),gzip(gfe)
| Complaints-To: groups-ab...@xxxxxxxxxx
| Injection-Info: p77g2000hsh.googlegroups.com; posting-host=82.163.107.234;
| posting-account=SQ7yPw0AAADIhVBO0N-ExE-c_tEslvjK
| Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!newsfeed0
0.sul.t-online.de!t-online.de!border2.nntp.dca.giganews.com!nntp.giganews.co
m!out03b.usenetserver.com!news.usenetserver.com!in02.usenetserver.com!news.u
senetserver.com!postnews.google.com!p77g2000hsh.googlegroups.com!not-for-mai
l
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:41908
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| On 5 Jun, 13:25, Dave P <Davey.Proc...@xxxxxxxxx> wrote:
| > On 5 Jun, 10:27, v-ter...@xxxxxxxxxxxxxxxxxxxx (Terence Liu [MSFT])| > wrote:

| >
| >
| >
| > > Hello Customer,
| >
| > > Thank you for posting here.
| >
| > > According to your description, I understand that you tick Integrated
| > > Windows Authentications, but you still be prompted to input
authentication
| > > when you access the companyweb. If I have misunderstood the problem,
please
| > > don't hesitate to let me know.
| >
| > > Based on my research, you are prompted to input authentication when
you
| > > access the companyweb is caused by that you enable the Basic
authentication
| > > (password is sent in clear text). As I know, the Basic authentication
| > > (password is sent in clear text) will be perform before the Integrated
| > > Windows Authentications, if you enable both of them. Therefore, I
suggest
| > > you clear the Basic authentication (password is sent in clear text)
option
| > > on companyweb web site:
| >
| > > 1. Please open IIS on SBS.
| >
| > > 2. Extend SBSname (local computer)->Web Sites->companyweb
| >
| > > 3. Right click companyweb, select properties,
| >
| > > 4. Select Directory Security tab, click Edit button under the
| > > Autherntication and access control pane
| >
| > > 5. Clear the Basic authentication (password is sent in clear text)
option,
| > > and ensure only tick the Integrated Windows Authentications option.
| >
| > > 6. Click OK twice to finish.
| >
| > > Meanwhile, ensure the client computer which access the companyweb is
logon
| > > domain.
| >
| > > If we can not resolve the issue after we perform the above steps,
please
| > > kindly help me collect some information for further investigation:
| >
| > > 1. Do you get any error page when you access the companyweb? If yes,
please
| > > capture screenshots on the error page and send the pictures to me at
| > > v-ter...@xxxxxxxxxxxxx
| >
| > > 2. Please try to access companyweb from SBS, does the issue happen
again?
| >
| > > 3. Collect the IIS log.
| >
| > > a. Open IIS snap-in.
| > > b. Right click Default Web Site and click Properties.
| > > c. Uncheck the "Enable Logging" box and click Apply.
| > > d. Go to C:\WINDOWS\system32\LogFiles\W3SVC1 folder and move all
files to a
| > > backup location.
| > > e. Check "Enable Logging" box and click OK.
| > > f. Run IISReset command.
| > > g. Reproduce the problem and send the log file in
| > > C:\WINDOWS\system32\LogFiles\W3SVC1 folder to me for research.
| >
| > > 4. Gather IIS Metabase:
| >
| > > 1) Download the IIS Resource Kit tools from the following
page:http://www.microsoft.com/downloads/details.aspx?FamilyId=56FC92EE-A71..

Yes unfortunately it is a customized webpage so I will repost in the
iis group, thanks for your input.

Dave

.