I have a test active directory domain named
ad.example.com and have joined some Windows clients stations to the AD domain.
I'm able to log on the client station as
AD\username. However, when I try to access protected IIS resource on the the DC (
dchostname.ad.example.com) I have to use
AD\username does not work.
Why is this the case? I want to be able to logon to the IIS resource as the logged on user
AD\username. Am I missing any setting in IIS to be able to use
AD\username to access it?
The server is
Windows Server 2008 R2 with
IIS 7. The client is
Windows 7. Netbios name is
dchostname. The protected resouce being accessed is
ADFS trust points hosted under
IIS Default Web Site to test single signon. As you can tell this is a test setup so I'm not too concerned about sharing on the DC.
In my other setup where the domain name is simply
example.com everything works as expected. I'm trying to understand what is different about naming a domain
ad.example.com and why that behaves differently. In this case is the domain
AD being considered a subdomain? This is the only domain in the forest.