Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Windows Authentication Credential box asking multiple times in IE8 and IIS7

We have couples of intranet websites hosted on the Windows 2008 Server and all of them are using the Windows Authentication mode. For Example,

  1. SiteA
  2. SiteB
  3. SiteC
  4. SiteD (Not working)
  5. SiteE (Not working)

Among them, without any special modification, SiteA, B and C are working while Site D and E are not working in IE8. I double checked the settings and I am sure that I set all the same setting. But when I use Firefox to test, all sites are working.

In IE8, for SiteA, B and C, I don't even need to type my credential and it logs in automatically by using my AD account. But for Site D and E, it asks the username and password for 3 times and after that, I got the following error message even though I provided the correct one.

401 - Unauthorized: Access is denied due to invalid credentials.
You do not have permission to view this directory or page using the credentials that you supplied.

I attached my Authentication and Authroization setting for those sites which have errors. enter image description here

The advanced settings is as follow:

enter image description hereenter image description here

How can I configure these erroneous sites to work like SiteA, B and C? What did I miss?

We don't have Security Tab in IE8 coz of the company policy and we don't tweak anything for SiteA, B and C to work correctly.

Thanks everyone.

like image 483
TTCG Avatar asked Feb 23 '12 09:02

TTCG


People also ask

How do I configure Windows authentication in IIS?

In the Web Server (IIS) pane, scroll to the Role Services section, and then click Add Role Services. On the Select Role Services page of the Add Role Services Wizard, select Windows Authentication, and then click Next. On the Confirm Installation Selections page, click Install. On the Results page, click Close.

How do I get IE to prompt for credentials?

Click the Trusted sites icon and hit the Sites button. Hit the Custom level... button. Enable Prompt for user name and password to have Internet Explorer prompt for credentials.


2 Answers

This procedure fixed it for me...

  1. Open IIS Manager
  2. Browse to and click the site in question
  3. Double click the Authentication icon
  4. Right click on "Windows Authentication" and click "Providers"
  5. Move "NTLM" to the top of the list.
like image 200
Casey Williams Avatar answered Sep 17 '22 08:09

Casey Williams


Thats correct, NTLM has to be at the top of the providers. I also wanted to note that, Extended Protection in the Advanced Settings has to be turned OFF as you have done up there. This also fixes the authentication problems that happen if you connect from chrome or firefox.

like image 27
deepMurtix Avatar answered Sep 21 '22 08:09

deepMurtix