I've got an SMTP server sitting in a DMZ that I'm looking to deploy.
Everything is going great with exception of the SMTP authentication
behaviour.

The DMZ domain has a one-way forest trust with the internal domain for the
purposes of authenticating users going out through the proxy.

I've setup the default domain in the Access tab | Authentication dialog to
point to our internal domain instead of the DMZ domain so that users could
still use their internal Pre-Windows 2000 account name to authenticate
against the SMTP server with.

When I go to actually test the configuration I cannot get by authentication
without specifying the domain in DOMAIN\username format.  While it works it
will be a hassle to explain to the users that they need to change their SMTP
configuration to support this.

I'm wondering if anyone else can guess why IIS isn't leveraging the "Default
domain" field?  In case it helps the Integrated Windows Authentication is
also enabled.

Thanks,
Colin

[ Post a follow-up to this message ]

I found this reference but the property doesn't seem to apply properly:

"The DefaultDomain property specifies the default domain for logon to an
SMTP server. If this value is not specified, the default domain is the
domain name controlled by the computer, if the computer is a domain
controller. If the computer is not a domain controller, the default domain
is the computer name."
http://msdn.microsoft.com/library/e....asp?frame=true

Every time I reset IIS it replaces it with the computer name.  Anyone have
thoughts on this?

Thanks,
Colin


"Colin Bowern" <colin.bowern@nospam.officialcommunity.com> wrote in message
news:u9BDSq2gFHA.2180@TK2MSFTNGP15.phx.gbl...
> I've got an SMTP server sitting in a DMZ that I'm looking to deploy.
> Everything is going great with exception of the SMTP authentication
> behaviour.
>
> The DMZ domain has a one-way forest trust with the internal domain for the
> purposes of authenticating users going out through the proxy.
>
> I've setup the default domain in the Access tab | Authentication dialog to
> point to our internal domain instead of the DMZ domain so that users could
> still use their internal Pre-Windows 2000 account name to authenticate
> against the SMTP server with.
>
> When I go to actually test the configuration I cannot get by
> authentication without specifying the domain in DOMAIN\username format.
> While it works it will be a hassle to explain to the users that they need
> to change their SMTP configuration to support this.
>
> I'm wondering if anyone else can guess why IIS isn't leveraging the
> "Default domain" field?  In case it helps the Integrated Windows
> Authentication is also enabled.
>
> Thanks,
> Colin
>

[ Post a follow-up to this message ]