Professional Web Applications Themes

IIS Security strange things - ASP.NET Security

I have intranet application based on ASP.NET on Win2000AS (Framework 1.1). Website uses an Integrated Windows Authentication as Authentication method in IIS and has following security configuration in the web.config ------------------------------------------ <identity impersonate="false" /> <authentication mode="Windows" /> <authorization> <deny users="?" /> </authorization> <customErrors defaultRedirect="CustomError.aspx" mode="Off"> <error statusCode="401" redirect="Custom401.html"/> </customErrors> ------------------------------------------ And everything goes fine for 99.9% users and not for one only, who always get a popup login window to login this website. He has WinXP box, with latest browser, like many others, but for any reason website cannot recognize that user as a valid internal user. Any ideas? Thank ...

  1. #1

    Default IIS Security strange things

    I have intranet application based on ASP.NET on Win2000AS (Framework 1.1).

    Website uses an Integrated Windows Authentication as Authentication method
    in IIS and has following security configuration in the web.config

    ------------------------------------------
    <identity impersonate="false" />

    <authentication mode="Windows" />
    <authorization>
    <deny users="?" />
    </authorization>

    <customErrors defaultRedirect="CustomError.aspx" mode="Off">
    <error statusCode="401" redirect="Custom401.html"/>
    </customErrors>
    ------------------------------------------

    And everything goes fine for 99.9% users and not for one only, who always
    get a popup login window to login this website.
    He has WinXP box, with latest browser, like many others, but for any reason
    website cannot recognize that user as a valid internal user.

    Any ideas? Thank you


    Alexey Smirnov Guest

  2. #2

    Default Re: IIS Security strange things

    Hi ,
    In IE open Options -> select Security
    Select Custom LEVEL -> User Authentication
    Check if the user has checked Prompt for user name and password.
    If its marked make it to auttomatic login only in intranet zone.
    Arvind
    "Alexey Smirnov" <removeit.hellosmalig.com> wrote in message
    news:OSktyX5$DHA.392TK2MSFTNGP12.phx.gbl...
    > I have intranet application based on ASP.NET on Win2000AS (Framework 1.1).
    >
    > Website uses an Integrated Windows Authentication as Authentication method
    > in IIS and has following security configuration in the web.config
    >
    > ------------------------------------------
    > <identity impersonate="false" />
    >
    > <authentication mode="Windows" />
    > <authorization>
    > <deny users="?" />
    > </authorization>
    >
    > <customErrors defaultRedirect="CustomError.aspx" mode="Off">
    > <error statusCode="401" redirect="Custom401.html"/>
    > </customErrors>
    > ------------------------------------------
    >
    > And everything goes fine for 99.9% users and not for one only, who always
    > get a popup login window to login this website.
    > He has WinXP box, with latest browser, like many others, but for any
    reason
    > website cannot recognize that user as a valid internal user.
    >
    > Any ideas? Thank you
    >
    >

    Arvind P Rangan Guest

  3. #3

    Default Re: IIS Security strange things

    Hi, Arvind

    yes, he has the default level (medium low) for the intranet zone
    and in addition that site inserted in Local Intranet Site List
    (Security - Sites - Advanced...)

    Alexey


    "Arvind P Rangan" <arvind99hotmail.com> wrote in message
    news:%23vNeUd5$DHA.1212TK2MSFTNGP12.phx.gbl...
    > Hi ,
    > In IE open Options -> select Security
    > Select Custom LEVEL -> User Authentication
    > Check if the user has checked Prompt for user name and password.
    > If its marked make it to auttomatic login only in intranet zone.
    > Arvind
    > "Alexey Smirnov" <removeit.hellosmalig.com> wrote in message
    > news:OSktyX5$DHA.392TK2MSFTNGP12.phx.gbl...
    > > I have intranet application based on ASP.NET on Win2000AS (Framework
    1.1).
    > >
    > > Website uses an Integrated Windows Authentication as Authentication
    method
    > > in IIS and has following security configuration in the web.config
    > >
    > > ------------------------------------------
    > > <identity impersonate="false" />
    > >
    > > <authentication mode="Windows" />
    > > <authorization>
    > > <deny users="?" />
    > > </authorization>
    > >
    > > <customErrors defaultRedirect="CustomError.aspx" mode="Off">
    > > <error statusCode="401" redirect="Custom401.html"/>
    > > </customErrors>
    > > ------------------------------------------
    > >
    > > And everything goes fine for 99.9% users and not for one only, who
    always
    > > get a popup login window to login this website.
    > > He has WinXP box, with latest browser, like many others, but for any
    > reason
    > > website cannot recognize that user as a valid internal user.
    > >
    > > Any ideas? Thank you
    > >
    > >
    >
    >

    Alexey Smirnov Guest

  4. #4

    Default Re: IIS Security strange things

    Alexey,
    Click on Custom Level
    and in that See what is selected for User Authentication.
    Arvind
    "Alexey Smirnov" <removeit.hellosmalig.com> wrote in message
    news:%23Iydfq5$DHA.1700TK2MSFTNGP12.phx.gbl...
    > Hi, Arvind
    >
    > yes, he has the default level (medium low) for the intranet zone
    > and in addition that site inserted in Local Intranet Site List
    > (Security - Sites - Advanced...)
    >
    > Alexey
    >
    >
    > "Arvind P Rangan" <arvind99hotmail.com> wrote in message
    > news:%23vNeUd5$DHA.1212TK2MSFTNGP12.phx.gbl...
    > > Hi ,
    > > In IE open Options -> select Security
    > > Select Custom LEVEL -> User Authentication
    > > Check if the user has checked Prompt for user name and password.
    > > If its marked make it to auttomatic login only in intranet zone.
    > > Arvind
    > > "Alexey Smirnov" <removeit.hellosmalig.com> wrote in message
    > > news:OSktyX5$DHA.392TK2MSFTNGP12.phx.gbl...
    > > > I have intranet application based on ASP.NET on Win2000AS (Framework
    > 1.1).
    > > >
    > > > Website uses an Integrated Windows Authentication as Authentication
    > method
    > > > in IIS and has following security configuration in the web.config
    > > >
    > > > ------------------------------------------
    > > > <identity impersonate="false" />
    > > >
    > > > <authentication mode="Windows" />
    > > > <authorization>
    > > > <deny users="?" />
    > > > </authorization>
    > > >
    > > > <customErrors defaultRedirect="CustomError.aspx" mode="Off">
    > > > <error statusCode="401" redirect="Custom401.html"/>
    > > > </customErrors>
    > > > ------------------------------------------
    > > >
    > > > And everything goes fine for 99.9% users and not for one only, who
    > always
    > > > get a popup login window to login this website.
    > > > He has WinXP box, with latest browser, like many others, but for any
    > > reason
    > > > website cannot recognize that user as a valid internal user.
    > > >
    > > > Any ideas? Thank you
    > > >
    > > >
    > >
    > >
    >
    >

    Arvind P Rangan Guest

  5. #5

    Default Re: IIS Security strange things

    User Authentication
    Logon
    Automatic logon only in Intranet zone

    -----------------
    Any ideas?

    Alexey



    "Arvind P Rangan" <arvind99hotmail.com> wrote in message
    news:uwNu$LPAEHA.1600tk2msftngp13.phx.gbl...
    > Alexey,
    > Click on Custom Level
    > and in that See what is selected for User Authentication.
    > Arvind
    > "Alexey Smirnov" <removeit.hellosmalig.com> wrote in message
    > news:%23Iydfq5$DHA.1700TK2MSFTNGP12.phx.gbl...
    > > Hi, Arvind
    > >
    > > yes, he has the default level (medium low) for the intranet zone
    > > and in addition that site inserted in Local Intranet Site List
    > > (Security - Sites - Advanced...)
    > >
    > > Alexey
    > >
    > >
    > > "Arvind P Rangan" <arvind99hotmail.com> wrote in message
    > > news:%23vNeUd5$DHA.1212TK2MSFTNGP12.phx.gbl...
    > > > Hi ,
    > > > In IE open Options -> select Security
    > > > Select Custom LEVEL -> User Authentication
    > > > Check if the user has checked Prompt for user name and password.
    > > > If its marked make it to auttomatic login only in intranet zone.
    > > > Arvind
    > > > "Alexey Smirnov" <removeit.hellosmalig.com> wrote in message
    > > > news:OSktyX5$DHA.392TK2MSFTNGP12.phx.gbl...
    > > > > I have intranet application based on ASP.NET on Win2000AS (Framework
    > > 1.1).
    > > > >
    > > > > Website uses an Integrated Windows Authentication as Authentication
    > > method
    > > > > in IIS and has following security configuration in the web.config
    > > > >
    > > > > ------------------------------------------
    > > > > <identity impersonate="false" />
    > > > >
    > > > > <authentication mode="Windows" />
    > > > > <authorization>
    > > > > <deny users="?" />
    > > > > </authorization>
    > > > >
    > > > > <customErrors defaultRedirect="CustomError.aspx" mode="Off">
    > > > > <error statusCode="401" redirect="Custom401.html"/>
    > > > > </customErrors>
    > > > > ------------------------------------------
    > > > >
    > > > > And everything goes fine for 99.9% users and not for one only, who
    > > always
    > > > > get a popup login window to login this website.
    > > > > He has WinXP box, with latest browser, like many others, but for any
    > > > reason
    > > > > website cannot recognize that user as a valid internal user.
    > > > >
    > > > > Any ideas? Thank you
    > > > >
    > > > >
    > > >
    > > >
    > >
    > >
    >
    >

    Alexey Smirnov Guest

Similar Threads

  1. strange things happening..
    By iambrew in forum Macromedia Contribute General Discussion
    Replies: 3
    Last Post: December 28th, 07:20 PM
  2. Strange Things
    By myIP in forum Macromedia Flash Flashcom
    Replies: 0
    Last Post: April 29th, 05:32 AM
  3. Strange things in Opera...
    By Steve in forum Macromedia Flash Sitedesign
    Replies: 4
    Last Post: January 7th, 07:44 AM
  4. seeing strange things?
    By Micah Montoy in forum PHP Development
    Replies: 2
    Last Post: July 9th, 10:54 AM
  5. [PHP] seeing strange things?
    By Mike Ford in forum PHP Development
    Replies: 0
    Last Post: July 9th, 10:12 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139