IIS Server Security - How can I remove the "NTAuthenticationProviders" node in IIS 6

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > January 2006 > How can I remove the "NTAuthenticationProviders" node in IIS 6





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author How can I remove the "NTAuthenticationProviders" node in IIS 6
Michael Morisoli

2006-01-15, 5:52 pm

I ran the command cscript adsutil.vbs set w3svc/NTAuthenticationProviders
"Negotiate,NTLM" which is causing some services to not use Kerberos which is
causing some other problems. I would like to find out how to remove this
node as if I never ran the command.

Thanks, Mike


Ken Schaefer

2006-01-15, 8:49 pm

Running "cscript adsutil.vbs help" would show you that adustil accepts a
"delete" command.

That said, you need to have the "Negotiate" part set in order to use
Kerberos...

Cheers
Ken


"Michael Morisoli" <michael@removeme.vieon.net> wrote in message
news:u8eBudiGGHA.3856@TK2MSFTNGP12.phx.gbl...
:I ran the command cscript adsutil.vbs set w3svc/NTAuthenticationProviders
: "Negotiate,NTLM" which is causing some services to not use Kerberos which
is
: causing some other problems. I would like to find out how to remove this
: node as if I never ran the command.
:
: Thanks, Mike
:
:


David Wang [Msft]

2006-01-16, 7:50 am

It is usually ok to delete the NTAuthenticationProviders property since the
default installation does not even have that property set.

The default value for that property contains Negotiate, so things are
supposed to just automatically work upon installation... ;-)

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//

"Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
news:%23xJVRbjGGHA.3036@tk2msftngp13.phx.gbl...
> Running "cscript adsutil.vbs help" would show you that adustil accepts a
> "delete" command.
>
> That said, you need to have the "Negotiate" part set in order to use
> Kerberos...
>
> Cheers
> Ken
>
>
> "Michael Morisoli" <michael@removeme.vieon.net> wrote in message
> news:u8eBudiGGHA.3856@TK2MSFTNGP12.phx.gbl...
> :I ran the command cscript adsutil.vbs set w3svc/NTAuthenticationProviders
> : "Negotiate,NTLM" which is causing some services to not use Kerberos
> which
> is
> : causing some other problems. I would like to find out how to remove
> this
> : node as if I never ran the command.
> :
> : Thanks, Mike
> :
> :
>
>



Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com