I'm setting up a projects' web and would like to grant
access to projects selectively, i.e., specific users
should access only specific projects. The IIS is set to
request Windows authentication.
The PROJECTS folder ACL grants list access to Domain
Users. The ASP page PROJECTS\LIST.ASP displays all
projects subdirectories (hyperlinking the content) and and
has the ACL set to read&execute for Domain Users. In
project subdir PROJECTS\MYPROJECT I have added a
particular domain user with read&execute&list.

Now my problem: when the particular domain user opens
PROJECTS\LIST.ASP he is asked to provide his credentials
and the page is displayed as expected. But when he tries
to navigate to any of the hyperlinked project content he
was granted access to, a second login dialog appear and
his credentials are refused, i.e., after three attempts
the "access denied" page appears. Why is a second logon
required? And why are his credentials refused?

Thanks in advance, Enrico

[ Post a follow-up to this message ]