Solved

Integrated Windows authentication is not working in IE

Posted on 2008-10-22
5
1,880 Views
Last Modified: 2012-05-05
We have an intranet.  To control access to it, we use cheap IIS integrated windows authentication.  When going to the address -- 10.18.10.100/employee_intranet -- Firefox users get a login prompt.  When IE users go to that address, they immediately receive my custom unauthorized page.  What can I do to fix this?
intranet.jpg
0
Comment
Question by:mrcoulson
  • 2
  • 2
5 Comments
 
LVL 37

Expert Comment

by:meverest
ID: 22784588
Hi,

probably those IE users are logged in to a domain that does not have rights to the web content.

try disabling windows auth and enable only basic auth.

Cheers.
0
 

Author Comment

by:mrcoulson
ID: 22785119
But doesn't basic authentication send only with clear text?  I don't know if I want our user's passwords flying around the internet like that.
0
 
LVL 37

Expert Comment

by:meverest
ID: 22791342
Yes,

generally, if you want security at all, then you will want to use ssl to encrypt your access credentials - ALL of them, even windows integrated.

Cheers.
0
 
LVL 51

Expert Comment

by:Ted Bouskill
ID: 22793285
Use a fully qualified domain name for the website that matches the client computers domain. Then IE will recognize the site as a 'Local Intranet' site and log in automatically.

Otherwise add the site in the 'Trusted Sites' zone and set 'Automatic Login' for trusted sites.

Don't use SSL for your intranet (too much overhead) and you are correct, Basic Authentication isn't secure and adding SSL to compensate is overkill.

By the way, to setup auto login in FireFox type 'about:config' in the address bar.  Then in the Filter text box type 'NTLM' and some options will show up.  There is one you can add trusted domains to automatically log in.
0
 

Accepted Solution

by:
mrcoulson earned 0 total points
ID: 23102140
I just told IIS to reject all except a range of IP addresses which match our internal network and some remote sites.
0

Featured Post

U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

First of all, clustering IIS is something you should rarely consider doing. In almost all cases, Microsoft Network Load Balancing (NLB) (http://technet.microsoft.com/en-us/library/cc758834(WS.10).aspx) is a much better solution when you need to p…
What is an ISAPI filter?   •      It's an assembly (.dll file) that can add or change the way IIS works.   •      They can be enabled globally for your web server or on a site-by-site basis.   When the IIS server receives a request, enabling the ISAPI fi…
This tutorial gives a high-level tour of the interface of Marketo (a marketing automation tool to help businesses track and engage prospective customers and drive them to purchase). You will see the main areas including Marketing Activities, Design …
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now