Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Windows Authentication:prompts Username and Password

Status
Not open for further replies.

dvimm

Programmer
Apr 26, 2007
23
US
Hi,
I have an intranet app on my local machine with following settings
IIS: Windows authentication only and
ASPNET USER AND IUSR has access to file folders
webconfig:authentication mode windows

It works fine on my local, but if any other user tries to access the app through my local, it prompts for username and password.

Please advice.
Thanks
 
Code:
<system.web>
   <authentication mode="Windows"/>
   <identity impersonate="true"/>
   <!--other configs as necessary-->
</system.web>

Jason Meckley
Programmer
Specialty Bakers, Inc.

faq855-7190
 
hit submit too soon...
the reason this works locally is because the server and client machine are the same. you are logged in as yourself so all the authentication passes through.

once deployed the server and client are separate machines. you need to tell the application to impersonate the user who is connected.

now the website will act as the user on the clients machine. so any operation within the website will be under the clients credentials.

to take this one step further if your website accesses files on another server (remote machine) then you need to configure delegation so the client's credentials are passed from the IIS server to the remote server. delegation is configured in AD.

Jason Meckley
Programmer
Specialty Bakers, Inc.

faq855-7190
 
Thanks for quick reply Jason, will try that..
 
we tried it and users are saying they are still getting 401.1 error
 
You might check your group and local policies. If I remember correctly, you need to enable storing passwords with a reversible encryption in order to use windows authentication.

I believe it is
Computer Security > Account Policies > Password Policies

"If it's stupid but works, it isn't stupid."
-Murphy's Military Laws
 
Thanks acent, I don't have rights to edit the settings. I will try calling help desk of ours...
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top