Yes:

I run a Win2k3 server with iis 6.0 and standard pop3 with smtp. The issue I'
m facing is that my customers who use the server to send messages keep getti
ng a pop up box asking for their username and password credentials when I se
t the smtp server to use In
tegrated Windows Authenication and Anonymous. When I use Basic Authenication
, this goes away but I'm exposed with clear text over the Internet. Any idea
s on how to patch this? I want to be secured with that info when it travels 
to the server.

I have SPA unchecked on the server and I even tried checking the SPA in outg
oing for Outlook Express. When I tested this senerio, it asked for credentia
ls the first time only but then the setting became unchecked when I went bac
k into the mail profile und
er the outgoing authenication settings.

Any info would be appreciated.

[ Post a follow-up to this message ]

What mail clients are they using? SPA uses NTLM auth under the covers, so
users will need an SPA compliant mail client.

Secondly, POP3 and SMTP auth are two separate things.
When you do "send and receive", you need to auth to the POP3 server, and you
need to auth to the SMTP server.

Now, it seems that your email client is somehow "loosing" it's settings (and
so trying to logon anonymously), which is probably why the user is getting a
prompt. You could verify this by using ethereal (www.ethereal.com) and
putting a trace on the network (I'm happy to have a quite look at the trace
output if you want).

If this is the case (OE forgets settings, and tries to logon anonymously),
then this is an OE issue, not an SMTP server issue...

Cheers
Ken


"Mark Sanchez" <anonymous@discussions.microsoft.com> wrote in message
news:3428BAFA-E776-4EF5-AB0E-36B6DA3965FD@microsoft.com...
: Yes:
:
: I run a Win2k3 server with iis 6.0 and standard pop3 with smtp. The issue
I'm facing is that my customers who use the server to send messages keep
getting a pop up box asking for their username and password credentials when
I set the smtp server to use Integrated Windows Authenication and Anonymous.
When I use Basic Authenication, this goes away but I'm exposed with clear
text over the Internet. Any ideas on how to patch this? I want to be secured
with that info when it travels to the server.
:
: I have SPA unchecked on the server and I even tried checking the SPA in
outgoing for Outlook Express. When I tested this senerio, it asked for
credentials the first time only but then the setting became unchecked when I
went back into the mail profile under the outgoing authenication settings.
:
: Any info would be appreciated.

[ Post a follow-up to this message ]

Hello Ken:

Thank you for your reply. My clients are using Outlook and Outlook Express. 
Both are receiving the same response. I assume both are SPA compliant since 
they offer the setting. My sever has it turned off currently for pop3.

However, when SPA was checked, my clients get a prompt for the username, pas
sword, and domain which they type in once and it works for that session. Whe
n they shut down the mail client and open again trying to send another email
, the same box comes up aga
in. The mail clients are definitely not storing the info on the machine.

Have you ever heard of such? Is there a workaround if so?

[ Post a follow-up to this message ]

If the clients are losing their settings, this is not an IIS issue. Please
try an OE, or Outlook group. Since I'm not an expert on any of these
clients, I can only speculate (since you also haven't posted which versions
of OE or Outlook you are using, what SP level, what hotfixes etc).

Cheers
Ken

"Mark Sanchez" <anonymous@discussions.microsoft.com> wrote in message
news:FFDA8FEB-0E23-49AA-A34F-721E540BD7B7@microsoft.com...
: Hello Ken:
:
: Thank you for your reply. My clients are using Outlook and Outlook
Express. Both are receiving the same response. I assume both are SPA
compliant since they offer the setting. My sever has it turned off currently
for pop3.
:
: However, when SPA was checked, my clients get a prompt for the username,
password, and domain which they type in once and it works for that session.
When they shut down the mail client and open again trying to send another
email, the same box comes up again. The mail clients are definitely not
storing the info on the machine.
:
: Have you ever heard of such? Is there a workaround if so?

[ Post a follow-up to this message ]