IIS Server Security - Problems with IIS 5 default domain

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > April 2006 > Problems with IIS 5 default domain





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Problems with IIS 5 default domain
davelj

2006-04-27, 7:53 am

I have a W2000 server running IIS 5 for my local intranet and a help desk
website. We use basic authentication and I have set the default domain to my
local domain name. When a user attempts to login the login is rejected unless
the user enters his login as domain\username. When the user only enters
username, I get an event log entry showing that the server is attempting to
authenticate the user against the local server instead of the domain.

I have tried resetting the default domain through the Internet Services
Manager both at the server and at the website level with no change. I
installed Metaedit and searched for defaultlogondomain and found that all of
the entries were pointing at the domain name and not the server name so I
can't figure out why this is happening.

I'm running out or ideas on this one. When should I go from here?
Roger Abell [MVP]

2006-04-27, 7:53 am

Is Windows integrated authentication also enabled ?
For the default domain to be used you must force use of
the clear text (basic) login.

"davelj" <davelj@discussions.microsoft.com> wrote in message
news:7D7DFC4B-27BA-4233-A4C0-02D53DEFDF67@microsoft.com...
>I have a W2000 server running IIS 5 for my local intranet and a help desk
> website. We use basic authentication and I have set the default domain to
> my
> local domain name. When a user attempts to login the login is rejected
> unless
> the user enters his login as domain\username. When the user only enters
> username, I get an event log entry showing that the server is attempting
> to
> authenticate the user against the local server instead of the domain.
>
> I have tried resetting the default domain through the Internet Services
> Manager both at the server and at the website level with no change. I
> installed Metaedit and searched for defaultlogondomain and found that all
> of
> the entries were pointing at the domain name and not the server name so I
> can't figure out why this is happening.
>
> I'm running out or ideas on this one. When should I go from here?



davelj

2006-04-27, 7:53 am

Windows integrated authentication is not enabled. Basic authentication is the
only authentication method enabled.

"Roger Abell [MVP]" wrote:

> Is Windows integrated authentication also enabled ?
> For the default domain to be used you must force use of
> the clear text (basic) login.
>
> "davelj" <davelj@discussions.microsoft.com> wrote in message
> news:7D7DFC4B-27BA-4233-A4C0-02D53DEFDF67@microsoft.com...
>
>
>

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com