Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a one way trust with a foreign domain, they access my web application hosted in IIS using windows integrated auth.. problem i am seeing for every new request iis does the auth agains the DC using netlogon logs.. is there a way to cache the windows auth in IIS for the either browser session?

share|improve this question

migrated from Jul 11 '11 at 11:09

This question came from our site for professional and enthusiast programmers.

I imagine there's a good reason for that to be the default way of handling authentication attempts. If you disable a user, a cached credential may be your undoing. Have you considered using Active Directory Federation Services? This achieves what you're after but at the cost of implementing a couple of new servers. It removes the need for the trust since it's all done through ADFS but it will scale nicely if you choose to start providing your application to other businesses. If you're interested in ADFS, check out: – Lewis Jul 11 '11 at 11:34

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.