Yes, Enable Integrated Auth is checked, as is Automatic logon only in
Intranet zone.
We have added *.domain.name to the intranet zone in case they wish to
use the FQDN.
Thanks,
Trevor
-----Original Message-----
From: Zack Schiel [mailto:ZSchiel@blueandco.com]
Sent: Thursday, June 09, 2005 2:45 PM
To: Trevor; focus-ms@securityfocus.com
Subject: RE: Kerberos & NTLM Auth in IIS6
There is an 'Enable Integrated Windows Authentication' checkbox in IE's
Internet Options Advanced tab. Is it checked?
-Z-
-----Original Message-----
From: Trevor [mailto:trevor@rottdog.com]
Sent: Thursday, June 09, 2005 3:30 PM
To: focus-ms@securityfocus.com
Subject: Kerberos & NTLM Auth in IIS6
I have two machines, very similar patch level, both XP Pro SP1. They are
accessing an internal site (the website is identified as "Local
Intranet" by both machines) that is set up to use only Integrated
Authentication.
One machine sends NTLM authentication, which fails, prompting the user
with a username/password dialog box. The same user can log onto a
different machine and that machine uses Kerberos auth, which I get the
typical IE of attempting anon. access first, then using Integrated Auth
and succeeding without a username/password dialog box.
What should I be looking for to find out why one machine is not using
Kerberos while another machine is?
Thanks,
Trevor
------------------------------------------------------------------------
---
------------------------------------------------------------------------
---
---------------------------------------------------------------------------
---------------------------------------------------------------------------
