Solved

401.2 error with IIS using Integrated Security

Posted on 2004-04-23
10
1,267 Views
Last Modified: 2008-09-02
Hey,

I'm trying to get to the bottom of a problem that is driving me crazy. I recently deployed an app for my company that uses IIS 6 and Tomcat. Everything seemed to be going fine until 2 users reported an error they got when they typed the url into a browser window. Everywhere i look for a solution it tells me i need to switch from Anonymous Authentication to something else, but since the start I've been using Integrated Security and these users have sufficient entitlements to access the site, but still they can't. Is there some other setting in IIS that i need to check? Or is it something specific with the browser version these two are using - quite a few people have logged on at this stage without encountering this problem

Hope you can HELP.

0
Comment
Question by:peterwnorman
10 Comments
 
LVL 37

Expert Comment

by:meverest
Comment Utility
check that the problem users are logged on to the domain and not to their local computer.

cheers.
0
 

Author Comment

by:peterwnorman
Comment Utility
the problem users are outside the domain, as is most everyone. everyone else is challenged by the server to enter their domain username and password. these 2 aren't. the server simply throws a 401.2 error
0
 

Author Comment

by:peterwnorman
Comment Utility
i just found an article on microsoft.com that says the error can occur if you use NTLM on the server (which i am) and try and access the server through another proxy server. but surely there is some other method of allowing a user to access a site that is outside their current domain when they are accessing it through a proxy server...
0
Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

 
LVL 23

Expert Comment

by:rama_krishna580
Comment Utility
see here..

 Netscape doesn't support Integrated Windows authentication. If you want
 Netscape users to be able to log in to the site, you'll need to select
 Basic authentication. You can select both Integrated and Basic if you'd
 like -- IE clients will use Integrated, and everyone else will use
Basic.
 
 Please note that passwords go over the wire in almost-cleartext with
Basic
 authentication. To prevent password sniffing, you'll want to install and
 use an SSL certificate on your site.

And finally check here www.iisfaq.com for answers....

best of luck..

R.K
0
 

Author Comment

by:peterwnorman
Comment Utility
these users are using IE...
0
 
LVL 7

Accepted Solution

by:
shahrial earned 500 total points
Comment Utility
Error Message
HTTP Error 401 - 401.2 Unauthorized: Logon Failed Due To Server Configuration

Cause
The User Authentication settings are incorrect under the Security Tab in Internet Options

Solution
Make sure "Automatic logon only in Intranet Zone" is selected under "User Authentication"

How to select "Automatic logon only in Intranet Zone" is selected
1.) From the Start menu, click Settings, and choose Control Panel.
2.) Double-click the Internet Options icon.
3.) Click on the Security tab.
4.) Click the Custom Level button.
5.) Scroll down until Automatic logon only in Intranet zone is visible.
6.) Select Automatic logon only in Intranet zone.
7.) Click the OK button.
8.) Click the OK button.
9.) Click the OK button.
10.) Close all windows.

Hope this helps...



0
 
LVL 8

Expert Comment

by:sandipkharde
Comment Utility
Hi Team...I had same issue

i switched NTLM to Keberos authentication .now it working fine....

http://support.microsoft.com/kb/832769
0

Featured Post

Get up to 2TB FREE CLOUD per backup license!

An exclusive Black Friday offer just for Expert Exchange audience! Buy any of our top-rated backup solutions & get up to 2TB free cloud per system! Perform local & cloud backup in the same step, and restore instantly—anytime, anywhere. Grab this deal now before it disappears!

Join & Write a Comment

Today I came across an interesting issue that had me pulling my hair out.  I was troubleshooting a new internal web site which uses integrated security instead of anonymous.  When browsing the site from my laptop, I was able to access it with no iss…
Prologue It is often required to host multiple websites on a single instance of IIS, mostly in development environments instead of on production servers. I am sure it is not much a preferred solution on production servers but this is at least a pos…
This video discusses moving either the default database or any database to a new volume.
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now