Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a sharepoint site hosted on windows server 2008 r2 and iis7.

the sharepoint site is hosted on port 80.

when I browse the site by typing the IP of the machine I receive a login window asking for credentials to connect the Machine. after providing credentials another login window asks for credentials to connect to the sharepoint site.

my question is that when a user logs in to a sharepoint site he uses the credentials specified in the active directory, so why in my case I recieve the login window twice ?


share|improve this question
Where are you accessing the site from, are you on a domain connected PC, or from outside? – Sam Aug 26 '10 at 8:45
I access it from outside – Mina Samy Aug 26 '10 at 12:17

Have you configured SPN (Service Principal Name)?

You'd better search internet on:

  • "double hop",
  • delegation vs. impersonation,
  • SPN(Service Principal Name),
  • computer trusted for delegation
  • etc.

For ex.:

-- Update1:
Might be I did not understand the distribution of machines between IIS, Sharepoint and the one to which you connect.
But, anyway, if you connect from outside of AD from untrusted source through untrusted channel from non-domained machine, then you are not authenticated by Kerberos used internally inside AD (between domained machines) through secured channels. Therefore, the authentication happens twice. First, through NTLM2 (from outside) and, then, for internal Kerberos mechanism. I know cases when it happens 10-20 times.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.