401.2 error with IIS using Integrated Security

Posted on 2004-04-23
Medium Priority
Last Modified: 2008-09-02

I'm trying to get to the bottom of a problem that is driving me crazy. I recently deployed an app for my company that uses IIS 6 and Tomcat. Everything seemed to be going fine until 2 users reported an error they got when they typed the url into a browser window. Everywhere i look for a solution it tells me i need to switch from Anonymous Authentication to something else, but since the start I've been using Integrated Security and these users have sufficient entitlements to access the site, but still they can't. Is there some other setting in IIS that i need to check? Or is it something specific with the browser version these two are using - quite a few people have logged on at this stage without encountering this problem

Hope you can HELP.

Question by:peterwnorman
LVL 37

Expert Comment

ID: 10906169
check that the problem users are logged on to the domain and not to their local computer.


Author Comment

ID: 10907308
the problem users are outside the domain, as is most everyone. everyone else is challenged by the server to enter their domain username and password. these 2 aren't. the server simply throws a 401.2 error

Author Comment

ID: 10907349
i just found an article on microsoft.com that says the error can occur if you use NTLM on the server (which i am) and try and access the server through another proxy server. but surely there is some other method of allowing a user to access a site that is outside their current domain when they are accessing it through a proxy server...
Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

LVL 23

Expert Comment

ID: 10911483
see here..

 Netscape doesn't support Integrated Windows authentication. If you want
 Netscape users to be able to log in to the site, you'll need to select
 Basic authentication. You can select both Integrated and Basic if you'd
 like -- IE clients will use Integrated, and everyone else will use
 Please note that passwords go over the wire in almost-cleartext with
 authentication. To prevent password sniffing, you'll want to install and
 use an SSL certificate on your site.

And finally check here www.iisfaq.com for answers....

best of luck..


Author Comment

ID: 10911915
these users are using IE...

Accepted Solution

shahrial earned 2000 total points
ID: 10916960
Error Message
HTTP Error 401 - 401.2 Unauthorized: Logon Failed Due To Server Configuration

The User Authentication settings are incorrect under the Security Tab in Internet Options

Make sure "Automatic logon only in Intranet Zone" is selected under "User Authentication"

How to select "Automatic logon only in Intranet Zone" is selected
1.) From the Start menu, click Settings, and choose Control Panel.
2.) Double-click the Internet Options icon.
3.) Click on the Security tab.
4.) Click the Custom Level button.
5.) Scroll down until Automatic logon only in Intranet zone is visible.
6.) Select Automatic logon only in Intranet zone.
7.) Click the OK button.
8.) Click the OK button.
9.) Click the OK button.
10.) Close all windows.

Hope this helps...


Expert Comment

ID: 22366466
Hi Team...I had same issue

i switched NTLM to Keberos authentication .now it working fine....


Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Here are the symptoms: You start receiving calls from users that one of your legacy web apps isn't coming up, so you log into your IIS 5 server to check it out.  When you pull up the services, you notice that the WWW Publishing service isn't runn…
Lync server 2013 or Skype for business Backup Service Error ID 4049 – After File Share Migration
How to fix display issue, screen flickering issue when I plug in power cord to the machine. Before I start explaining the solution lets check out once the issue how it looks like after I connect the power cord. most of you also have faced this…
Free Data Recovery software is an advanced solution from Kernel Tools to recover data and files such as documents, emails, database, media and pictures, etc. It supports recovery from physical & logical drive after a hard disk crash, accidental/inte…

597 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question