Re: IIS authentication problems
- From: v-terliu@xxxxxxxxxxxxxxxxxxxx (Terence Liu [MSFT])
- Date: Mon, 11 Jun 2007 06:34:08 GMT
Hello Dave,
Thank you for kind update. I'm sorry for the delay response due to the
weekend.
Thanks again for your understanding. I hope everything is going well.
Please do not hesitate to post in this great newsgroup if you need any
assistance in the future. I look forward to working with you again.
Have a nice day.
Best regards,
Terence Liu(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: Dave P <Davey.Proctor@xxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| Subject: Re: IIS authentication problems
| Date: Fri, 08 Jun 2007 07:42:57 -0700
| Organization: http://groups.google.com
| Lines: 177
| Message-ID: <1181313777.547790.117020@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <1180984040.966768.27610@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
| <1181067665.596151.304850@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| <KSXXgXCqHHA.3736@xxxxxxxxxxxxxxxxxxxxxx>
| NNTP-Posting-Host: 86.6.168.115
| Mime-Version: 1.0
| Content-Type: text/plain; charset="us-ascii"
| X-Trace: posting.google.com 1181313777 13888 127.0.0.1 (8 Jun 2007
14:42:57 GMT)
| X-Complaints-To: groups-abuse@xxxxxxxxxx
| NNTP-Posting-Date: Fri, 8 Jun 2007 14:42:57 +0000 (UTC)
| In-Reply-To: <KSXXgXCqHHA.3736@xxxxxxxxxxxxxxxxxxxxxx>
| User-Agent: G2/1.0
| X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB;
rv:1.8.1.1) Gecko/20061204 Firefox/2.0.0.1,gzip(gfe),gzip(gfe)
| Complaints-To: groups-abuse@xxxxxxxxxx
| Injection-Info: p77g2000hsh.googlegroups.com; posting-host=86.6.168.115;
| posting-account=SQ7yPw0AAADIhVBO0N-ExE-c_tEslvjK
| Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!newsfeed0
0.sul.t-online.de!t-online.de!border2.nntp.dca.giganews.com!nntp.giganews.co
m!out02a.usenetserver.com!news.usenetserver.com!in02.usenetserver.com!news.u
senetserver.com!postnews.google.com!p77g2000hsh.googlegroups.com!not-for-mai
l
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:42675
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| On 6 Jun, 11:31, v-ter...@xxxxxxxxxxxxxxxxxxxx (Terence Liu [MSFT])
| wrote:
| > Hello Dave,
| >
| > Thank you for kind update.
| >
| > I checked your metabase. The default website did not enable the
anonymous
| > access. It is incorrect, I suggest you enable it.
| >
| > Meanwhile, you do not tell me which webpage has access issue. Please
let me
| > know it. I will check the directory security in the metabase.
| >
| > Note: If the webpage is customized by yourself, we do not support in SBS
| > newsgroup, please try to repost your issue in IIS newsgroup.
| >
| > As you mentioned "Does directory security placed up at the default web
site
| > level inherit down to any webpages/apps underneath?", you can modify the
| > directory security of default web site, when you click OK to apply the
| > settings, you will be asked whether apply the settings on the
subfolders.
| >
| > Additional, if you install ISA server on SBS, please install ISA
firewall
| > client on the internal client computer to provide credentials to SBS.
| >
| > Hope these steps will give you some help.
| >
| > Thanks and have a nice day!
| >
| > Best regards,
| >
| > Terence Liu(MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! -www.microsoft.com/security
| >
| > =====================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup
here:http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > checkhttp://support.microsoft.comfor regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| > --------------------
| > | From: Dave P <Davey.Proc...@xxxxxxxxx>
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | Subject: Re: IIS authentication problems
| > | Date: Tue, 05 Jun 2007 11:21:05 -0700
| > | Organization:http://groups.google.com
| > | Lines: 186
| > | Message-ID: <1181067665.596151.304...@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| > | References: <1180984040.966768.27...@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
| > | <Xj9JFP1pHHA.2...@xxxxxxxxxxxxxxxxxxxxxx>
| > | <1181046358.776720.243...@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| > | NNTP-Posting-Host: 82.163.107.234
| > | Mime-Version: 1.0
| > | Content-Type: text/plain; charset="us-ascii"
| > | X-Trace: posting.google.com 1181067665 19988 127.0.0.1 (5 Jun 2007
| > 18:21:05 GMT)
| > | X-Complaints-To: groups-ab...@xxxxxxxxxx
| > | NNTP-Posting-Date: Tue, 5 Jun 2007 18:21:05 +0000 (UTC)
| > | In-Reply-To: <1181046358.776720.243...@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| > | User-Agent: G2/1.0
| > | X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.2; en-GB;
| > rv:1.8.0.11) Gecko/20070312 Firefox/1.5.0.11,gzip(gfe),gzip(gfe)
| > | Complaints-To: groups-ab...@xxxxxxxxxx
| > | Injection-Info: p77g2000hsh.googlegroups.com;
posting-host=82.163.107.234;
| > | posting-account=SQ7yPw0AAADIhVBO0N-ExE-c_tEslvjK
| > | Path:
| >
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!newsfeed0
| >
0.sul.t-online.de!t-online.de!border2.nntp.dca.giganews.com!nntp.giganews.co
| >
m!out03b.usenetserver.com!news.usenetserver.com!in02.usenetserver.com!news.u
| >
senetserver.com!postnews.google.com!p77g2000hsh.googlegroups.com!not-for-mai
| > l
| > | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:41908
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | On 5 Jun, 13:25, Dave P <Davey.Proc...@xxxxxxxxx> wrote:
| > | > On 5 Jun, 10:27, v-ter...@xxxxxxxxxxxxxxxxxxxx (Terence Liu
[MSFT])| > wrote:
| >
| > | >
| > | >
| > | >
| > | > > Hello Customer,
| > | >
| > | > > Thank you for posting here.
| > | >
| > | > > According to your description, I understand that you tick
Integrated
| > | > > Windows Authentications, but you still be prompted to input
| > authentication
| > | > > when you access the companyweb. If I have misunderstood the
problem,
| > please
| > | > > don't hesitate to let me know.
| > | >
| > | > > Based on my research, you are prompted to input authentication
when
| > you
| > | > > access the companyweb is caused by that you enable the Basic
| > authentication
| > | > > (password is sent in clear text). As I know, the Basic
authentication
| > | > > (password is sent in clear text) will be perform before the
Integrated
| > | > > Windows Authentications, if you enable both of them. Therefore, I
| > suggest
| > | > > you clear the Basic authentication (password is sent in clear
text)
| > option
| > | > > on companyweb web site:
| > | >
| > | > > 1. Please open IIS on SBS.
| > | >
| > | > > 2. Extend SBSname (local computer)->Web Sites->companyweb
| > | >
| > | > > 3. Right click companyweb, select properties,
| > | >
| > | > > 4. Select Directory Security tab, click Edit button under the
| > | > > Autherntication and access control pane
| > | >
| > | > > 5. Clear the Basic authentication (password is sent in clear text)
| > option,
| > | > > and ensure only tick the Integrated Windows Authentications
option.
| > | >
| > | > > 6. Click OK twice to finish.
| > | >
| > | > > Meanwhile, ensure the client computer which access the companyweb
is
| > logon
| > | > > domain.
| > | >
| > | > > If we can not resolve the issue after we perform the above steps,
| > please
| > | > > kindly help me collect some information for further investigation:
| > | >
| > | > > 1. Do you get any error page when you access the companyweb? If
yes,
| > please
| > | > > capture screenshots on the error page and send the pictures to me
at
| > | > > v-ter...@xxxxxxxxxxxxx
| > | >
| > | > > 2. Please try to access companyweb from SBS, does the issue happen
| > again?
| > | >
| > | > > 3. Collect the IIS log.
| > | >
| > | > > a. Open IIS snap-in.
| > | > > b. Right click Default Web Site and click Properties.
| > | > > c. Uncheck the "Enable Logging" box and click Apply.
| > | > > d. Go to C:\WINDOWS\system32\LogFiles\W3SVC1 folder and move all
| > files to a
| > | > > backup location.
| > | > > e. Check "Enable Logging" box and click OK.
| > | > > f. Run IISReset command.
| > | > > g. Reproduce the problem and send the log file in
| > | > > C:\WINDOWS\system32\LogFiles\W3SVC1 folder to me for research.
| > | >
| > | > > 4. Gather IIS Metabase:
| > | >
| > | > > 1) Download the IIS Resource Kit tools from the following
| >
page:http://www.microsoft.com/downloads/details.aspx?FamilyId=56FC92EE-A71..
|
| Yes unfortunately it is a customized webpage so I will repost in the
| iis group, thanks for your input.
|
| Dave
|
|
.
- References:
- IIS authentication problems
- From: Dave P
- Re: IIS authentication problems
- From: Dave P
- IIS authentication problems
- Prev by Date: RE: Data Execution Prevention: IIS Worker Process
- Next by Date: Re: Removing outlook security restriction
- Previous by thread: Re: IIS authentication problems
- Next by thread: Re: GPO or Not GPO?
- Index(es):