Windows authentication (or Integrated Windows Authentication) is a process where connections to applications or external systems are automatically authenticated with the currently logged on Windows user. This functionality was first made available in Windows 2000.

learn more… | top users | synonyms

10
votes
3answers
2k views

How did I get this Windows share to prompt for login?

Or: "Is this a thing? And how would I check if it was?" In an environment without a Domain Controller, when accessing a share on a Windows Server 2008 R2 box, from a remote computer without a ...
7
votes
2answers
13k views

Integrated Windows Authentication with Chrome and FireFox

I have a webapplication which uses claims based authentication. The STS is ADFS 2.0. When I am in the intranet and use IE, IWA is used and no login dialog appears. When I am on the internet zone, the ...
7
votes
2answers
4k views

IIS 7.5: How to configure custom Authentication Error page with Windows Authentication. 401 header problems

I have a php website running under IIS 7.5. The site is secured by Windows authentication and that works fine: When users go to the site, they are asked for username/password and get through if ...
6
votes
2answers
3k views

Windows Authentication behaves oddly when VPN'd

We've got a few apps that rely on windows authentication - a couple of web apps with AD auth turned on and we usually connect to our SQL servers with windows auth. This normally runs without a hitch. ...
6
votes
2answers
2k views

Why can a user log in via more than one UPN

I've changed the for all users UPN suffix of a company from us.mycompany.local to mycompany.com in order to use claims aware applciations. In testing before the change I discovered that even if I ...
5
votes
2answers
483 views

Risks of Kerberos Delegation

I've been spending hours upon hours trying to learn and understand Windows Authentication, Kerberos, SPNs, and Constrained Delegation in IIS 7.5. One thing I just don't get is why it is "risky" to ...
5
votes
1answer
983 views

“Anonymous Logon” vs “NTLM V1” What to disable?

Working on getting rid of NTLM V1 logins all together in the AD environment; found lot of events, almost all of them from the user "Anonymous Logon"(4624 events) other 1(4624 events) percent coming ...
4
votes
2answers
2k views

Web app running as NETWORK SERVICE can connect to SQL Server but windows service running as LOCAL SYSTEM cannot

I have installed a .net web application on a Windows Server 2003 IIS server, running in an Application Pool as NETWORK SERVICE and connecting to SQL Server on a different machine using Integrated ...
4
votes
2answers
4k views

Can I set a default domain for a Windows Authenticated website in IIS7?

I have an intranet site using Windows Authentication. When users are prompted for credentials, they enter: User: domain\username Pass: SomePassword It'd be nice if they could leave off the domain\ ...
4
votes
3answers
6k views

Outlook Prompting for password from Exchange server in domain environment

We are running exchange 2007 in a domain environment. We have mostly outlook 2003 clients, but in process of upgrading to outlook 07 over the next couple of weeks. Some users (both 03 & 07) are ...
4
votes
1answer
2k views

What is the relationship between User Rights Assignment Policies vs. Membership of Local Groups

I just spent the better part of this morning on a support call with a vendor where we eventually resolved our issue by manually adding the service account their application was using to the following ...
4
votes
3answers
2k views

Authentication via RADIUS : MSCHAPv2 Error 691

I am working on setting up authentication into an Acme Packet Net-Net 3820 (SBC) via RADIUS. The accounting side of things is working just fine with no issues. The authentication side of things is ...
3
votes
1answer
2k views

Connecting to other instances of Hyper-V Manager in domain

I have a test environment that I host from my computer. I have configured an external switch so that it can be accessed by others. Windows 8 Enterprise and Hyper-V Manager Version: 6.2.9200.16384 If ...
3
votes
4answers
4k views

Computers losing contact to the Domain

We have a problem with a set of computers on our domain. they are constantly losing their trust relationship with the domain. it first happened last week and 8 days later happened again. On the Server ...
3
votes
1answer
3k views

Definition of BUILTIN\Users?

For a server on a Windows Domain, what is the membership of "BUILTIN\Users" exactly? (I figure this has an obvious answer, but googling hasn't given me any clear definitions)
3
votes
1answer
1k views

SQL Server Windows Authentication NTUSERNAME is different to Windows Login

An employee at a client has just got married and as a result they have changed her details, login name et al., in Active Directory (AD). The problem is SUSER_NAME() in procedures and the NTUSERNAME ...
3
votes
1answer
2k views

SQL Server 2008 - Can't Log On via local SQL Server Management Studio

FYI: OS is SQL Server 2008 (NOT R2). Yesterday, when I was trying to get Visual Studio 2010 on a remote Win XP machine to be able to debug ASP.NET over the network, I installed Active Directory (and ...
3
votes
2answers
4k views

IIS7 Slow for some users when using Windows Authentication

We have an internet site containing a "hello world" .html file on IIS7 with Windows authentication turned on. The users are local machine Windows users on the web-server. For some users the site is ...
3
votes
1answer
4k views

Unable to assign group permissions with ICACLS on Windows Server 2012

I cannot get icacls to accept my group for adding permissions. I am using an elevated power shell with the following command: icacls 'C:/foo' /grant:r 'Group Foo':f I get the following error: ...
3
votes
1answer
674 views

Intranet website - getting a login box although I have configured Windows Authentication in IIS

In a Windows AD domain environment (MYDOMAIN with DNS suffix mydomain.local), I have a server with an Intranet website, that runs on IIS 7.5. I have disabled all authentication types except Windows ...
3
votes
1answer
2k views

Integrated Windows Authentication with Apache in Windows

I have a server running Windows 2000 / Apache 2.0 and PHP 5. I need a server that recognizes the user's login client PC that is in the same domain. All the tutorials I find are with IIS or Apache on ...
3
votes
1answer
951 views

Workstation authentication against wrong AD server in multi-site configuration

Having a problem which I've seen before but haven't yet found a solution to, I've got multiple AD sites in one domain physically separated and logically separated by different subnets and AD sites. ...
3
votes
5answers
1k views

How to login faster using a domain account when the domain is unavailable

I have a laptop with Windows 7 ultimate enterprise edition installed. This is a company laptop so i have domain account as I am a domain user but also a local administrator on my laptop. My problem ...
3
votes
2answers
2k views

Kernel-mode Authentication: 401 errors when accessing site from remote machines

I have several Classic ASP sites that use Integrated Windows Authentication and Kerberos delegation. They work OK on the live servers (recently moved to a Server 2008/IIS7 servers), but do not work ...
3
votes
1answer
292 views

Windows authentication on intranet sites from hosting server

I have come across this problem before, it doesn't generally get in the way too much but i would really like to know why it happens. I am running SBS 2008, i changed the Bindings for the Sharepoint ...
2
votes
1answer
399 views

How can there be a difference between “Log on as: Local System account” and “NT Authority\System”?

First off, I wish to clarify that I have been browsing loads of questions regarding the "Local System" account and even though I feel enlightened about the properties of the account, none of them seem ...
2
votes
2answers
468 views

How come identical name and authentication between two windows PCs on same network works?

My Experiment So I set up a simple network with Two computers. Both on the same Work group. I created a LOCAL user 'A' with pasword 'A' in Computer 1. And then I created an identical named LOCAL ...
2
votes
3answers
760 views

Active Directory set up with replication — need a way to control login authentication host

I have two Active Directory servers set up with replication, ad2 and ad4. ad4 has a higher latency than ad2 as it is offsite. All clients are supposed to log in and authenticate to the ad2 server. The ...
2
votes
2answers
237 views

Login to disconnected domain controller

I cannot login to a long-time disconnected domain controller running Server 2008 R2. I have tried resetting the "local" Administrator password using the following method, but still cannot login. ...
2
votes
1answer
1k views

Company Wide Windows Auth with Chrome and Firefox

I know that we can allow Firefox to allow passing through of Windows credentials by editing the following about:config settings --If using Kerberos-- network.negotiate-auth.trusted-uris ...
2
votes
3answers
1k views

SQL Server bulk import from fileshare. How can I get SQL Server to see the share?

I have two servers A and B. B is a database server, A is (here) a client to the database server. A tool running on server A connects to SQL Server on server B and ultimately triggers a bulk import ...
2
votes
1answer
72 views

What difference does it make for a Virtual machine to be removed and then re-added to an Active Directory domain

On a Windows VM, while installing a service which needs to run under a domain account, my Domain Controller refuses to authenticate the domain account I use. After I remove this VM from the domain, ...
2
votes
1answer
1k views

Users of Intranet site on IIS7.5 prompted for username/password

I have an intrasite from a third-party that we just transitioned from IIS 6 on Windows 2003 to a Windows 2008 R2 server with IIS 7.5. On the old system, the user would connect ot the website and be ...
2
votes
1answer
1k views

ARR 3 IIS 7.5 Windows Authentication not working

We have been spinning our wheels trying to get windows authentication working through ARR. We've created a new domain account (appservices) ARR Server (srvarr) using default app pool with user set ...
2
votes
1answer
198 views

Invoke Windows password dialog when using NET USE

I'll try to get to the point. Using Run from the start menu to an un-authenticated machine: \\hostname\share gives me the Windows prompt for password, good. Running %systemroot%\explorer.exe ...
2
votes
1answer
3k views

The trust relationship between the primary domain and the trusted domain failed

Scenario: We have an application server (IIS 7.0, Windows 2008 R2) and a seperate database server (SQL 2008) for both our test and production environments (so 4 servers total). Our application server ...
2
votes
1answer
3k views

IIS 7 Windows Authentication Wrong User

IIS 7, Integrated App Pool, Identity set to NetworkService We've recently moved an asp.net MVC 3 to our production environment. The application uses windows authentication. The production environment ...
2
votes
2answers
183 views

Handling username changes in Subversion server with Windows Authentication

I have a Subversion server (version 1.7.2) that is fronted by Apache 2.2.21 using basic Windows/Active Directory authentication. Really it's just using the Visual SVN Server 2.5 package with Windows ...
2
votes
1answer
601 views

Ldap Authentication for Windows Standalone Servers

I have an LDAP server Novell eDirectory in my Environment through which has the user data. In my Environment i have set of Windows and Linux servers. I need to use this LDAP As the Authentication ...
2
votes
1answer
436 views

Windows service running as network service - how does it authenticate? Breaking change in W2K8?

A Windows service running as "Network Service" talks to services on other machines (here: SQL Server and Analysis Services), using Windows authentication. For authentication, we have to grant ...
2
votes
4answers
4k views

Windows authentication through IE - specify the domain

This question really relates to allowing to logon to a SharePoint installation from home but I guess it's a general IIS security question. When the login box pops up to collect the windows ...
2
votes
2answers
298 views

SQL Server Windows-only Authentication Strategy problem

I would like to use Windows-only Authentication in SQL Server for our web applications. In the past we've always created the all powerful 1 SQL Login for the web application. After doing some ...
2
votes
1answer
1k views

How do I log in, using SSPI, to SQL Server 2008 R2 on a server in one workgroup from a workstation in another?

We're having trouble connecting to our SQL Server (2008 R2) via SSPI. Our team has recently moved from a domain-based setup to a decentralised workgroup-based setup. Each developer has access to a ...
2
votes
1answer
3k views

Kerberos authentication failing with 401

We have a .NET MVC 3 application deployed in IIS 7 on our Windows 2008 server (let's call it PROD). The application has Anonymous and Windows Authentication enabled - all others are disabled. The ...
2
votes
3answers
344 views

Does active directory log authentication success/failure with the OS?

For example, if I use an AD account to login on Windows 7 and then Windows 8, will I be able to tell in logs setup by default? If not by default, how would I set this logging up?
2
votes
1answer
256 views

Windows Service and Group Policy unable to access network share on Win2008 Domain

I have one computer on my domain that has suddenly stopped receiving software updates via group policy. Domain logins still work, and group policy on the machine is still being updated, so it knows ...
2
votes
2answers
2k views

Windows authentication to SQL Server via IIS and PHP

We're running a PHP 5.4 application on Server 2008 R2. We would like to connect to a SQL Server 2008 database, on a separate server, using Windows authentication (must be Windows authentication--the ...
2
votes
3answers
1k views

How to send mails using a custom .NET application and Windows authentication to a distribution list that only allows authenticated senders?

This is basically a cross post from my StackOverflow question to see if I can get a server side perspective. I'm trying to send automated emails from a C# console application from machines to clients ...
2
votes
2answers
5k views

IIS7 + ASP.NET Impersonation + Windows Auth = 401 Unauthorized

I've got an asp.net app that relies on Request.LogonUserIdentity.Name to be populated with the username of the person logged onto the client machine. In IIS7 on the webserver, I've disabled Anonymous ...
2
votes
2answers
105 views

Windows Web Server in DataCenter Authenticate with AD in Office

We would like to have put a File Server in DataCentre to allow user to upload/download files when they are home. Since we have hundreds of users and would like to let the user to authenticate with the ...