We have an IIS 7.5 server running on Windows Server 2008 R2. It runs a mission-critical web app for us and we have been reluctant to install Windows Updates. This weekend, we help our breath and installed several Windows Updates and now single sign-on no longer works when users attempt to access the web app. They are now prompted for credentials.
In addition, users can't login even if they enter their correct credentials. After three tries they receive a "401 - Unauthorized: Access is denied due to invalid credentials." message.
I realize that we could go back and uninstall the 70+ updates but this seems to me to be a backwards step. Single sign-on was working before and the only thing that changed was Windows Updates.
If I login locally to the server's console and open the site using http://localhost/site_name
, this works. Accessing the site remotely sends us to a prompt for credentials that ultimately fails. We do not use SSL - the app is on port 80 (HTTP) and is on the internal intranet only. We are Active Directory and have a group policy to set the *.our_domain.com in the local intranet sites as trusted. This did not change either.
I've included a screen shot of the configured authentication for the site (again, this did not change as far as I can tell).
Any help is appreciated.