Added user to AD but user can not access IE

[WMB63]

I added a new employee to the AD.....The user gets an Error when they try to access IE.....a dialog box appears requesting username and password.....they enter it and then get an Access denied message requesting they complete a request that the owner give you access to the resource.....HUH!?!?!?!?....I added another user a couple of months ago the same way and they do not get this message....what did I miss??

Thanks!!

 

[Spirit]

Sounds like you're running a proxy server which restricts access to Internet / Intranet.

Check the membership of the other user and see if they've got the same. But you need to find what is stopping the access (ISA / GP?) and then include that for your new users.

Iain

 

[djtech2k]

It sounds like a proxy OR the site thats being opened may require authentication. For example, if the page trying to open is an intranet site with authentication required, it would prompt. Otherwise, I would say its a proxy.

 

[WMB63]

I have not set up a proxy server....I've not changed anything since last adding a user....I checked his premissions and groups he is in.....his settings are just like everyone elses.....if I enter my user name and password on his pc it lets me in.....could this be a IIS problem??

 

[djtech2k]

Thats what I am saying. Let me ask you this again, when you are prompted for name/password, is it trying to get to the same website every time or does it happen on all sites?

 

[WMB63]

I think found out what the problem is....I have everybody here set up to hit out Intranet page when they open IE...on this user's computer if the default page is set to our Intranet page he is prompted to enter his un and pw.....I changed his default page to MSN.com and he does not get this message....This is an IIS problem.....any suggestions...

 

[djtech2k]

It sounds like you have integrated authentication turned on in IIS.

Is the site intranet only? Are people required to be authenticated on the intranet before they can see this site? Do you want to allow anonymous browsing of the site?

These questions should get us going to where you can fix this. This issue is either an IIS issue, or if it just effects this machine, it may be a browser issue. There are authentication options in IE as well....

Check IE here:

Tools > Internet Options > security > Local Intranet > Custom Level > (Scroll to Bottom)

There you will see an authentication option. If you are talking about an intranet site and you have selected intranet in the option, I would set it to "Automatic Logon in Intranet Zone".

 

[WMB63]

dj,

Thanks for you help so far....yes, the site is intranet only...it is where we put up company information for the staff....there is no log in required....

I checked IE like you wrote and the automatic logon is checked....

 

[djtech2k]

Ok then, I would go into the IIS manager for the site. Go into the properties of the site running this site. Go into the "Directory Security" tab and under "Authentication and Access Control" click edit. If allow anonymous checked? are any of the boxes at the bottom checked?

If the website does NOT require authentication for security and does not need authentication for an application, then I would allow anonymous and uncheck all the bottom boxes. This way everyone will get in without a hitch. I assume that all your users, machines, and this web server are all in the same domain.

Report back your settings before you change anything though.

 

[WMB63]

dj,

the allow anonymous is not checked.....I guess i should have mentioned.....this happens to the only two people that i have created accounts for in the AD.....all other existing users can access the Intranet page w/out any problems....