Windows authentication (or Integrated Windows Authentication) is a process where connections to applications or external systems are automatically authenticated with the currently logged on Windows user. This functionality was first made available in Windows 2000.

learn more… | top users | synonyms

10
votes
3answers
357 views

How did I get this Windows share to prompt for login?

Or: "Is this a thing? And how would I check if it was?" In an environment without a Domain Controller, when accessing a share on a Windows Server 2008 R2 box, from a remote computer without a ...
7
votes
2answers
10k views

Integrated Windows Authentication with Chrome and FireFox

I have a webapplication which uses claims based authentication. The STS is ADFS 2.0. When I am in the intranet and use IE, IWA is used and no login dialog appears. When I am on the internet zone, the ...
6
votes
2answers
2k views

Windows Authentication behaves oddly when VPN'd

We've got a few apps that rely on windows authentication - a couple of web apps with AD auth turned on and we usually connect to our SQL servers with windows auth. This normally runs without a hitch. ...
5
votes
2answers
332 views

Risks of Kerberos Delegation

I've been spending hours upon hours trying to learn and understand Windows Authentication, Kerberos, SPNs, and Constrained Delegation in IIS 7.5. One thing I just don't get is why it is "risky" to ...
5
votes
1answer
150 views

“Anonymous Logon” vs “NTLM V1” What to disable?

Working on getting rid of NTLM V1 logins all together in the AD environment; found lot of events, almost all of them from the user "Anonymous Logon"(4624 events) other 1(4624 events) percent coming ...
5
votes
2answers
757 views

Why can a user log in via more than one UPN

I've changed the for all users UPN suffix of a company from us.mycompany.local to mycompany.com in order to use claims aware applciations. In testing before the change I discovered that even if I ...
5
votes
1answer
2k views

IIS 7.5: How to configure custom Authentication Error page with Windows Authentication. 401 header problems

I have a php website running under IIS 7.5. The site is secured by Windows authentication and that works fine: When users go to the site, they are asked for username/password and get through if ...
4
votes
3answers
6k views

Outlook Prompting for password from Exchange server in domain environment

We are running exchange 2007 in a domain environment. We have mostly outlook 2003 clients, but in process of upgrading to outlook 07 over the next couple of weeks. Some users (both 03 & 07) are ...
4
votes
1answer
1k views

What is the relationship between User Rights Assignment Policies vs. Membership of Local Groups

I just spent the better part of this morning on a support call with a vendor where we eventually resolved our issue by manually adding the service account their application was using to the following ...
3
votes
1answer
544 views

Connecting to other instances of Hyper-V Manager in domain

I have a test environment that I host from my computer. I have configured an external switch so that it can be accessed by others. Windows 8 Enterprise and Hyper-V Manager Version: 6.2.9200.16384 If ...
3
votes
4answers
3k views

Computers losing contact to the Domain

We have a problem with a set of computers on our domain. they are constantly losing their trust relationship with the domain. it first happened last week and 8 days later happened again. On the Server ...
3
votes
2answers
2k views

Web app running as NETWORK SERVICE can connect to SQL Server but windows service running as LOCAL SYSTEM cannot

I have installed a .net web application on a Windows Server 2003 IIS server, running in an Application Pool as NETWORK SERVICE and connecting to SQL Server on a different machine using Integrated ...
3
votes
1answer
2k views

Definition of BUILTIN\Users?

For a server on a Windows Domain, what is the membership of "BUILTIN\Users" exactly? (I figure this has an obvious answer, but googling hasn't given me any clear definitions)
3
votes
1answer
978 views

SQL Server Windows Authentication NTUSERNAME is different to Windows Login

An employee at a client has just got married and as a result they have changed her details, login name et al., in Active Directory (AD). The problem is SUSER_NAME() in procedures and the NTUSERNAME ...
3
votes
1answer
2k views

SQL Server 2008 - Can't Log On via local SQL Server Management Studio

FYI: OS is SQL Server 2008 (NOT R2). Yesterday, when I was trying to get Visual Studio 2010 on a remote Win XP machine to be able to debug ASP.NET over the network, I installed Active Directory (and ...
3
votes
2answers
3k views

IIS7 Slow for some users when using Windows Authentication

We have an internet site containing a "hello world" .html file on IIS7 with Windows authentication turned on. The users are local machine Windows users on the web-server. For some users the site is ...
3
votes
2answers
3k views

Can I set a default domain for a Windows Authenticated website in IIS7?

I have an intranet site using Windows Authentication. When users are prompted for credentials, they enter: User: domain\username Pass: SomePassword It'd be nice if they could leave off the domain\ ...
3
votes
1answer
2k views

Unable to assign group permissions with ICACLS on Windows Server 2012

I cannot get icacls to accept my group for adding permissions. I am using an elevated power shell with the following command: icacls 'C:/foo' /grant:r 'Group Foo':f I get the following error: ...
3
votes
1answer
535 views

Intranet website - getting a login box although I have configured Windows Authentication in IIS

In a Windows AD domain environment (MYDOMAIN with DNS suffix mydomain.local), I have a server with an Intranet website, that runs on IIS 7.5. I have disabled all authentication types except Windows ...
3
votes
1answer
2k views

Integrated Windows Authentication with Apache in Windows

I have a server running Windows 2000 / Apache 2.0 and PHP 5. I need a server that recognizes the user's login client PC that is in the same domain. All the tutorials I find are with IIS or Apache on ...
3
votes
1answer
561 views

Workstation authentication against wrong AD server in multi-site configuration

Having a problem which I've seen before but haven't yet found a solution to, I've got multiple AD sites in one domain physically separated and logically separated by different subnets and AD sites. ...
3
votes
5answers
1k views

How to login faster using a domain account when the domain is unavailable

I have a laptop with Windows 7 ultimate enterprise edition installed. This is a company laptop so i have domain account as I am a domain user but also a local administrator on my laptop. My problem ...
3
votes
1answer
108 views

Authentication via RADIUS : MSCHAPv2 Error 691

I am working on setting up authentication into an Acme Packet Net-Net 3820 (SBC) via RADIUS. The accounting side of things is working just fine with no issues. The authentication side of things is ...
3
votes
1answer
288 views

Windows authentication on intranet sites from hosting server

I have come across this problem before, it doesn't generally get in the way too much but i would really like to know why it happens. I am running SBS 2008, i changed the Bindings for the Sharepoint ...
2
votes
1answer
152 views

How can there be a difference between “Log on as: Local System account” and “NT Authority\System”?

First off, I wish to clarify that I have been browsing loads of questions regarding the "Local System" account and even though I feel enlightened about the properties of the account, none of them seem ...
2
votes
2answers
246 views

How come identical name and authentication between two windows PCs on same network works?

My Experiment So I set up a simple network with Two computers. Both on the same Work group. I created a LOCAL user 'A' with pasword 'A' in Computer 1. And then I created an identical named LOCAL ...
2
votes
3answers
696 views

Active Directory set up with replication — need a way to control login authentication host

I have two Active Directory servers set up with replication, ad2 and ad4. ad4 has a higher latency than ad2 as it is offsite. All clients are supposed to log in and authenticate to the ad2 server. The ...
2
votes
2answers
91 views

Login to disconnected domain controller

I cannot login to a long-time disconnected domain controller running Server 2008 R2. I have tried resetting the "local" Administrator password using the following method, but still cannot login. ...
2
votes
1answer
508 views

Company Wide Windows Auth with Chrome and Firefox

I know that we can allow Firefox to allow passing through of Windows credentials by editing the following about:config settings --If using Kerberos-- network.negotiate-auth.trusted-uris ...
2
votes
3answers
922 views

SQL Server bulk import from fileshare. How can I get SQL Server to see the share?

I have two servers A and B. B is a database server, A is (here) a client to the database server. A tool running on server A connects to SQL Server on server B and ultimately triggers a bulk import ...
2
votes
1answer
68 views

What difference does it make for a Virtual machine to be removed and then re-added to an Active Directory domain

On a Windows VM, while installing a service which needs to run under a domain account, my Domain Controller refuses to authenticate the domain account I use. After I remove this VM from the domain, ...
2
votes
1answer
1k views

Users of Intranet site on IIS7.5 prompted for username/password

I have an intrasite from a third-party that we just transitioned from IIS 6 on Windows 2003 to a Windows 2008 R2 server with IIS 7.5. On the old system, the user would connect ot the website and be ...
2
votes
1answer
91 views

Invoke Windows password dialog when using NET USE

I'll try to get to the point. Using Run from the start menu to an un-authenticated machine: \\hostname\share gives me the Windows prompt for password, good. Running %systemroot%\explorer.exe ...
2
votes
2answers
174 views

Handling username changes in Subversion server with Windows Authentication

I have a Subversion server (version 1.7.2) that is fronted by Apache 2.2.21 using basic Windows/Active Directory authentication. Really it's just using the Visual SVN Server 2.5 package with Windows ...
2
votes
1answer
525 views

Ldap Authentication for Windows Standalone Servers

I have an LDAP server Novell eDirectory in my Environment through which has the user data. In my Environment i have set of Windows and Linux servers. I need to use this LDAP As the Authentication ...
2
votes
1answer
414 views

Windows service running as network service - how does it authenticate? Breaking change in W2K8?

A Windows service running as "Network Service" talks to services on other machines (here: SQL Server and Analysis Services), using Windows authentication. For authentication, we have to grant ...
2
votes
4answers
3k views

Windows authentication through IE - specify the domain

This question really relates to allowing to logon to a SharePoint installation from home but I guess it's a general IIS security question. When the login box pops up to collect the windows ...
2
votes
2answers
292 views

SQL Server Windows-only Authentication Strategy problem

I would like to use Windows-only Authentication in SQL Server for our web applications. In the past we've always created the all powerful 1 SQL Login for the web application. After doing some ...
2
votes
1answer
962 views

How do I log in, using SSPI, to SQL Server 2008 R2 on a server in one workgroup from a workstation in another?

We're having trouble connecting to our SQL Server (2008 R2) via SSPI. Our team has recently moved from a domain-based setup to a decentralised workgroup-based setup. Each developer has access to a ...
2
votes
1answer
1k views

Kerberos authentication failing with 401

We have a .NET MVC 3 application deployed in IIS 7 on our Windows 2008 server (let's call it PROD). The application has Anonymous and Windows Authentication enabled - all others are disabled. The ...
2
votes
3answers
264 views

Does active directory log authentication success/failure with the OS?

For example, if I use an AD account to login on Windows 7 and then Windows 8, will I be able to tell in logs setup by default? If not by default, how would I set this logging up?
2
votes
1answer
215 views

Windows Service and Group Policy unable to access network share on Win2008 Domain

I have one computer on my domain that has suddenly stopped receiving software updates via group policy. Domain logins still work, and group policy on the machine is still being updated, so it knows ...
2
votes
2answers
1k views

Windows authentication to SQL Server via IIS and PHP

We're running a PHP 5.4 application on Server 2008 R2. We would like to connect to a SQL Server 2008 database, on a separate server, using Windows authentication (must be Windows authentication--the ...
2
votes
1answer
2k views

IIS 7 Windows Authentication Wrong User

IIS 7, Integrated App Pool, Identity set to NetworkService We've recently moved an asp.net MVC 3 to our production environment. The application uses windows authentication. The production environment ...
2
votes
2answers
4k views

IIS7 + ASP.NET Impersonation + Windows Auth = 401 Unauthorized

I've got an asp.net app that relies on Request.LogonUserIdentity.Name to be populated with the username of the person logged onto the client machine. In IIS7 on the webserver, I've disabled Anonymous ...
2
votes
2answers
103 views

Windows Web Server in DataCenter Authenticate with AD in Office

We would like to have put a File Server in DataCentre to allow user to upload/download files when they are home. Since we have hundreds of users and would like to let the user to authenticate with the ...
2
votes
1answer
4k views

IIS Won't authenticate domain user: 401.2

I'm having a lot of trouble with configuring authentication for IIS correctly. I have a SharePoint site running under IIS 6.0, and the IIS web site is configured for Integrated Windows ...
2
votes
2answers
848 views

Lock down a site using Forms Auth in IIS7 with Windows Auth

I have an ASP.NET MVC 1.0 application that uses Forms Authentication. We are using Windows Server 2008. I need to lock down the site so that only certain users (in AD Groups) can access the site. ...
2
votes
1answer
69 views

Can I give an application pool access to a remote share without an active directory domain?

I have an IIS application running on Server A. It needs the ability to write to a folder on a UNC share, currently on Server B. I would like to keep the share on Server B, but this environment does ...
2
votes
0answers
57 views

Mirrored local accounts to connect to database on different server and domain

My database client and database server are on different machines and are not connected to the same domain (this is not supported with my web host). I'm not keen to send username/password details via a ...