Link to home
Start Free TrialLog in
Avatar of onderock
onderock

asked on

Users prompted for credentials when logging into Outlook 2007 with a SBS 2008 backend

What is interesting is that if I make the users "Domain Admins" the issue disappears.  So after going around in circles on this it would seem that I have a basic permissions issue.  If only I knew which permission to change!
Avatar of Glen Knight
Glen Knight
Flag of United Kingdom of Great Britain and Northern Ireland image

It may not be a permission issue.

It could be a known problem that I have documented in my article here: https://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/A_2300-Outlook-continually-prompting-for-username-and-password.html

Do the service pack first, then if still no joy, try the Kernel Mode Authentication section.
Avatar of onderock
onderock

ASKER

Yes, I saw that fix but I'm running SP3 for Exchange.  The Kernal mode authentication was not on either.  I have tested the autodiscover services as well and those tests come back successful.
ASKER CERTIFIED SOLUTION
Avatar of Glen Knight
Glen Knight
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Time to test outlook autoconfig:
With outlook open, hold down CTRL key and right click on the Outlook icon in the bottom right hand side of your screen, then on the popup menu select the "Test Autoconfiguration". Select that, enter valid credentials and select the "autodiscover" option only and test.

Then go through the URLs returned and click on them 1 by 1 and enter standard user credentials where prompted, you'll soon find the one you cannot open as a normal user, but only an admin.
thank you demazter!  Looks like my system just needed a little kick!  I toggled the kernel authentication between true and false, reset IIS and like M A G I C it works now.  So ends hours of chasing my tail on this!

Weird that Domain Admins had no issues but I'm not going to worry about that now.

Here are the steps below for others:


%systemroot%\system32\inetsrv\AppCmd.exe set config /section:system.webServer/security/authentication/windowsAuthentication /useKernelMode:true /commit:apphost

iisreset /noforce

%systemroot%\system32\inetsrv\AppCmd.exe set config /section:system.webServer/security/authentication/windowsAuthentication /useKernelMode:false /commit:apphost

iisreset /noforce