Solved

Integrated Windows authentication is not working in IE

Posted on 2008-10-22
5
1,883 Views
Last Modified: 2012-05-05
We have an intranet.  To control access to it, we use cheap IIS integrated windows authentication.  When going to the address -- 10.18.10.100/employee_intranet -- Firefox users get a login prompt.  When IE users go to that address, they immediately receive my custom unauthorized page.  What can I do to fix this?
intranet.jpg
0
Comment
Question by:mrcoulson
  • 2
  • 2
5 Comments
 
LVL 37

Expert Comment

by:meverest
ID: 22784588
Hi,

probably those IE users are logged in to a domain that does not have rights to the web content.

try disabling windows auth and enable only basic auth.

Cheers.
0
 

Author Comment

by:mrcoulson
ID: 22785119
But doesn't basic authentication send only with clear text?  I don't know if I want our user's passwords flying around the internet like that.
0
 
LVL 37

Expert Comment

by:meverest
ID: 22791342
Yes,

generally, if you want security at all, then you will want to use ssl to encrypt your access credentials - ALL of them, even windows integrated.

Cheers.
0
 
LVL 51

Expert Comment

by:Ted Bouskill
ID: 22793285
Use a fully qualified domain name for the website that matches the client computers domain. Then IE will recognize the site as a 'Local Intranet' site and log in automatically.

Otherwise add the site in the 'Trusted Sites' zone and set 'Automatic Login' for trusted sites.

Don't use SSL for your intranet (too much overhead) and you are correct, Basic Authentication isn't secure and adding SSL to compensate is overkill.

By the way, to setup auto login in FireFox type 'about:config' in the address bar.  Then in the Filter text box type 'NTLM' and some options will show up.  There is one you can add trusted domains to automatically log in.
0
 

Accepted Solution

by:
mrcoulson earned 0 total points
ID: 23102140
I just told IIS to reject all except a range of IP addresses which match our internal network and some remote sites.
0

Featured Post

How our DevOps Teams Maximize Uptime

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us. Read the use case whitepaper.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Creating csr file for SSL 4 58
How do I write a redirect rule for this scenario? 2 37
OWA issue - Exchange 2013 - 440 Login Timeout 8 63
FTP server backups 5 46
Logparser is the smartest tool I have ever used in parsing IIS log files and there are many interesting things I wanted to share with everyone one of the  real-world  scenario from my current project. Let's get started with  scenario - How do w…
If you are a web developer, you would be aware of the <iframe> tag in HTML. The <iframe> stands for inline frame and is used to embed another document within the current HTML document. The embedded document could be even another website.
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question