Windows authentication (or Integrated Windows Authentication) is a process where connections to applications or external systems are automatically authenticated with the currently logged on Windows user. This functionality was first made available in Windows 2000.

learn more… | top users | synonyms

1
vote
0answers
84 views

Proxy hosted in IIS with NTLM, how can I enable single sign on?

I have a forward proxy hosted in IIS with windows authentication enabled. Firefox is set up to use the proxy. Problem is, I don't know what to do with network.automatic-ntlm-auth.trusted-uris. ...
0
votes
1answer
314 views

Only one user unable to authenticate against AD using Windows Authentication on a .NET 4.0 web application on iis7

We are having a problem where one user is unable to authenticate using Windows Authentication. The site is configured to allow "All Users" to access the website and I have confirmed that this user is ...
2
votes
2answers
502 views

Login to disconnected domain controller

I cannot login to a long-time disconnected domain controller running Server 2008 R2. I have tried resetting the "local" Administrator password using the following method, but still cannot login. ...
0
votes
1answer
1k views

IIS7 - Restrict access to an intranet site to a specific group of users

I have an ASP.NET site running in IIS7 on a local intranet. I want to restrict access to this site to a specific group of users. I think I should be able to do this by using Windows Authentication ...
1
vote
2answers
16k views

Minimum Number of Port need to Open between Windows Client & Domain Controller Only

I just want to know, which port need to be open if i place firewall between Windows Client ( XP or 7 ) and Domain Controller ( Window Server 2008 R2 ) Please note it is between Client and DC and not ...
11
votes
3answers
3k views

How did I get this Windows share to prompt for login?

Or: "Is this a thing? And how would I check if it was?" In an environment without a Domain Controller, when accessing a share on a Windows Server 2008 R2 box, from a remote computer without a ...
1
vote
1answer
169 views

Managing Active Directory account access across multiple forests / customers

We do managed IT services for a number of small / medium business. I'm looking to find a solution to manage our access to our clients' AD forest's in a scalable fashion. Right now, we manually create ...
1
vote
1answer
2k views

Windows Authentication credential prompt

I have a ASP.NET application (Framework 4 Classic Mode) running with Windows Authentication - it is an Intranet. Impersonation is on. Anonymous is off. Authentication works perfectly on every user's ...
1
vote
1answer
173 views

IIS(6) Access denied (401.3) when accessing a remote share

I am having trouble in getting IIS to access a share on a NAS not in domain. I have tried all the usual IIS workarounds I know with no luck, I'm hoping someone here will point me in the right ...
0
votes
1answer
44 views

Server 2008 r2 event logs show different username than one used for UNC

I am trying to UNC Path to the C drive of a hyper-v based VM that is running Windows Server 2008 R2 standard. I can RDP into the system just fine using the machine name. When I enter the UNC path: ...
0
votes
0answers
236 views

Improving Windows Authentication performance on IIS

We're struggling with performance issues with a ASP.NET MVC site that is using Windows Authentication. Response time is very slow on the first request to the site when the user is being ...
0
votes
1answer
2k views

Enable IIS directory browsing for specific user or group

At home, I have a small server running on Windows Server 2012 and IIS8 (no AD). I want some of the users on my server to be able to access a shared file directory so they can download it via https. I ...
3
votes
1answer
2k views

Connecting to other instances of Hyper-V Manager in domain

I have a test environment that I host from my computer. I have configured an external switch so that it can be accessed by others. Windows 8 Enterprise and Hyper-V Manager Version: 6.2.9200.16384 If ...
4
votes
2answers
3k views

Web app running as NETWORK SERVICE can connect to SQL Server but windows service running as LOCAL SYSTEM cannot

I have installed a .net web application on a Windows Server 2003 IIS server, running in an Application Pool as NETWORK SERVICE and connecting to SQL Server on a different machine using Integrated ...
1
vote
1answer
171 views

How to enable windows Authentication in IIS 7.5?

i need to enable Windows Autenthication for a specific website on IIS 7.5 If I open "Autenthication" I just see 3 options: Anonymous Based on Form ASP.NET Representation (3 above translated by ...
1
vote
1answer
79 views

Website authentication with a certificate from a different domain

My question: Is there a better way to enable authentication between 2 domains than what I'm doing below, and is Name Mapping the right thing to use? There are 2 domains; One is the primary ...
-1
votes
2answers
140 views

Connective Lamp Server to Windows Domain

I recently made a centos lamp server running apache mysql and php. I have wordpress and phpbb3 installed and running on the server. The linux server is running in the same building as a windows 2003 ...
0
votes
1answer
1k views

IIS 7.5 Windows Authentication not working (sometimes)

This is a weird one. We were happily running with Windows Authentication on our intranet site until I demoted one of our domain controllers. Now some workstations still work fine and are ...
1
vote
1answer
605 views

Windows authentication vs Android browsers in Windows Server 2008 r2 IIS7

I have a company website which uses Windows Authentication. The site runs on Windows Server 2008 R2, IIS 7. When we try to access it from mobile, we get mixed results - some browsers do succeed to ...
1
vote
1answer
218 views

Domain printers appear offline on non-domain PCs

Our organization must be able to offer non-domain PC's printing facilities using our domain printserver and since Windows 7 was released, it seems that the Kerberos ticket/printing authentication ...
2
votes
1answer
575 views

How can there be a difference between “Log on as: Local System account” and “NT Authority\System”?

First off, I wish to clarify that I have been browsing loads of questions regarding the "Local System" account and even though I feel enlightened about the properties of the account, none of them seem ...
4
votes
1answer
2k views

What is the relationship between User Rights Assignment Policies vs. Membership of Local Groups

I just spent the better part of this morning on a support call with a vendor where we eventually resolved our issue by manually adding the service account their application was using to the following ...
3
votes
1answer
5k views

Unable to assign group permissions with ICACLS on Windows Server 2012

I cannot get icacls to accept my group for adding permissions. I am using an elevated power shell with the following command: icacls 'C:/foo' /grant:r 'Group Foo':f I get the following error: ...
2
votes
2answers
672 views

How come identical name and authentication between two windows PCs on same network works?

My Experiment So I set up a simple network with Two computers. Both on the same Work group. I created a LOCAL user 'A' with pasword 'A' in Computer 1. And then I created an identical named LOCAL ...
4
votes
1answer
2k views

Company Wide Windows Auth with Chrome and Firefox

I know that we can allow Firefox to allow passing through of Windows credentials by editing the following about:config settings --If using Kerberos-- network.negotiate-auth.trusted-uris ...
3
votes
1answer
4k views

The trust relationship between the primary domain and the trusted domain failed

Scenario: We have an application server (IIS 7.0, Windows 2008 R2) and a seperate database server (SQL 2008) for both our test and production environments (so 4 servers total). Our application server ...
0
votes
1answer
3k views

User authentication — username mismatch in IIS in ASP.NET application

Last week, an employee's Active Directory username was changed (or a new one was created for them). For the purposes of this example, let's assume these usernames: Old: Domain\11111 New: Domain\22222 ...
7
votes
2answers
3k views

Why can a user log in via more than one UPN

I've changed the for all users UPN suffix of a company from us.mycompany.local to mycompany.com in order to use claims aware applciations. In testing before the change I discovered that even if I ...
0
votes
1answer
420 views

Cross domain UNC Paths - Securing Credentials

I have a folder on a Remote Domain: \DomainRemote\Shared_Folder And a process on a local Domain which needs to access said share: Trusts exist between the domains - but only authenticated users ...
1
vote
1answer
671 views

IIS 7.5 selectively overwrites my error response page

Using Windows 2008r2, IIS 7.5, I have an application using Windows Integrated Authentication (WWW-Authenticate: NTLM, Negotiate). In my ASP.NET MVC code, I am overwriting the IIS error page ...
1
vote
1answer
433 views

Powershell - how to Start-Job with an ActiveDirectory credential

My client controls access to their database with ActiveDirectory. I would like to do the following: $cred = Get-Credential Start-Job -Credential $cred { #do some stuff with the db } This works ...
1
vote
1answer
68 views

IIS - login by domain name is ok; login by IP address fails

I configured IIS server to use Windows authentication. On a client computer, I used IE to open a website of IIS by domain name - this resulted in automatic login. IP address - a dialog box appeared ...
1
vote
1answer
538 views

MS SQL 2008 - Can I use Windows Authentication to connect from a Mac

I have been using Navicat SQL on Mac (Snow Leopard) to connect to MS 2005 via "Basic Auth" and all is good. However the DB is now being migrated to MS 2008 and try as I might I cant get on via Windows ...
3
votes
1answer
1k views

Workstation authentication against wrong AD server in multi-site configuration

Having a problem which I've seen before but haven't yet found a solution to, I've got multiple AD sites in one domain physically separated and logically separated by different subnets and AD sites. ...
1
vote
1answer
442 views

IIS, SQLServer, Google Chrome and Windows Authentication

I'm searching the internet for almost 4 days now and I'm stuck. I've created a simple ASP MVC4 Intranet website and I have deployed it to server called: iis. That computer is inside the same domain ...
2
votes
1answer
1k views

How do I log in, using SSPI, to SQL Server 2008 R2 on a server in one workgroup from a workstation in another?

We're having trouble connecting to our SQL Server (2008 R2) via SSPI. Our team has recently moved from a domain-based setup to a decentralised workgroup-based setup. Each developer has access to a ...
1
vote
2answers
6k views

Getting http 403 error when accessing website from remote client

I have created an asp.net website that is to be accessed from client browsers running on the same domain. I've hosted the site on IIS 7.5 I have disabled Anonymous Authentication and Enabled Windows ...
0
votes
1answer
52 views

Authenticate to a machine not in the domain

I set up a windows server 2003 in a VM to test some code. The prod server has IIS6 and since I have Win 7 I can only install IIS 7 in my dev machine. Obviously I didn't add the machine to my company ...
2
votes
1answer
4k views

Kerberos authentication failing with 401

We have a .NET MVC 3 application deployed in IIS 7 on our Windows 2008 server (let's call it PROD). The application has Anonymous and Windows Authentication enabled - all others are disabled. The ...
0
votes
2answers
104 views

Windows Authentication over diferent domains

In my company we have a very complex infrastructure. We are from a subcompany, and we have a Active Directory Domain, configured in our PC's. Otherwise, all of us, have a Directory account for main ...
0
votes
2answers
172 views

Linux workstation and Active Directory authentication

I read a few articles regarding "How to Authenticate Linux Clients with Microsoft Active Directory" My question before I do it: what will happen to Notebooks that try to login when the Active ...
1
vote
0answers
437 views

IIS reverse proxy with Windows Auth throwing intermittent 502 errors

I have set up a web site (www.mysite.com) on IIS to provide SSL and Windows Auth, and to forward all HTTPS requests to another server (BIOS name: internalserver; port 2080). The rule specifying this ...
9
votes
3answers
5k views

IIS 7.5: How to configure custom Authentication Error page with Windows Authentication. 401 header problems

I have a php website running under IIS 7.5. The site is secured by Windows authentication and that works fine: When users go to the site, they are asked for username/password and get through if ...
0
votes
3answers
1k views

Why Does A/D Account Need SQL Server Login?

I need some help on understanding the differences between Windows and SQL Server Authentication: We have a SQL Server 2008 set to SQL Server and Windows Authentication Mode. There is one A/D user -- ...
2
votes
3answers
454 views

Does active directory log authentication success/failure with the OS?

For example, if I use an AD account to login on Windows 7 and then Windows 8, will I be able to tell in logs setup by default? If not by default, how would I set this logging up?
0
votes
1answer
265 views

Inter-connect two active directories for sharepoint authentication

I have 1 server with windows 2003 which is our office's domain controller, and other server with windows server 2008 in another office. The domain names are different, and what i need to do, is ...
1
vote
1answer
2k views

Microsoft Application Request Routing with Windows Authentication

I'm running into a problem trying to get Windows Authentication working in an environment that uses Microsoft Application Request Routing and was hoping someone might be able to help. The problem I'm ...
0
votes
1answer
87 views

Using Windows Authentication accross Domains when using VPN?

Is it possible to use Windows Authentication for users who are logged into their computer on one domain (ABC) on a particular AD system, for services that are on a second domain (XYZ) on a second AD ...
0
votes
1answer
3k views

Logging in user in Windows 2008 server using LogonUser fails on LogonType LOGON32_LOGON_SERVICE

I am using LogonUser function to logon an account to Windows 2008 R2 server on a domain with clusterring. When using LOGON32_LOGON_INTERACTIVE as LogonType, I successfully login. When using ...
5
votes
2answers
599 views

Risks of Kerberos Delegation

I've been spending hours upon hours trying to learn and understand Windows Authentication, Kerberos, SPNs, and Constrained Delegation in IIS 7.5. One thing I just don't get is why it is "risky" to ...