Companyweb: users prompted for credentials
|
Prev: Branch Office Setup
Next: Can't get on Internet...
From: Roland Hall on 12 Apr 2010 15:31 Users are prompted for credentials when the default page (http://companyweb/) loads in IE. Providing credentials will not make a connection but continue to request credentials. This issue affects all wks and the terminal server. If on the SBS Server, this issue does not appear. I can also, internally and externally connect to RWW and then select internal web and when asked for credentials, I can connect with a normal user account. So, it appears, if I'm not mistaken, that unless I'm logged in directly to the console, via TS or though RWW, access to Companyweb will prompt for credentials and fail to connect. I was following a discussion where Chad A. Gross was helping someone with this same issue (Mar. 2009) but the discussion ends without a solution. http://www.tech-archive.net/Archive/Windows/microsoft.public.windows.server.sbs/2009-03/msg02829.html
From: Russ SBITS.Biz [SBS-MVP] on 13 Apr 2010 17:35 SBS2003 or SBS2008 If SBS2003 First try re Running the CEICW to see If it will reset the permissions. (There may be some settings in IIS that are not correct.) If SBS2008 Fix network Connection wizard. If that doesn't work is the PC's set up to use the SBS has the DHCP Server? and the PC's have the IP of the SBS box as the DNS If you don't know, post the IPCONFIG /ALL from the SBS server and one of the Affected Machines. has anything Changed since this started happening? updates? etc. And are you up to date on all Service packs Patches etc? Sometimes just making sure updates and the server has been restarted will fix things Russ -- Russell Grover - SBITS.Biz [SBS-MVP] MCP, MCPS, MCNPS, SBSC Small Business Server/Computer Support - www.SBITS.Biz Question or Second Opinion - www.PersonalITConsultant.com BPOS - Microsoft Online Services - www.Microsoft-Online-Services.com http://www.twitter.com/SBITSdotBiz "Roland Hall" <RolandHall(a)discussions.microsoft.com> wrote in message news:F7293983-E61E-4324-B039-1C135D3F001F(a)microsoft.com... > Users are prompted for credentials when the default page > (http://companyweb/) > loads in IE. Providing credentials will not make a connection but > continue > to request credentials. > > This issue affects all wks and the terminal server. If on the SBS Server, > this issue does not appear. I can also, internally and externally connect > to > RWW and then select internal web and when asked for credentials, I can > connect with a normal user account. So, it appears, if I'm not mistaken, > that unless I'm logged in directly to the console, via TS or though RWW, > access to Companyweb will prompt for credentials and fail to connect. > > I was following a discussion where Chad A. Gross was helping someone with > this same issue (Mar. 2009) but the discussion ends without a solution. > http://www.tech-archive.net/Archive/Windows/microsoft.public.windows.server.sbs/2009-03/msg02829.html > >
From: Roland Hall on 14 Apr 2010 15:31 SBS 2008 Standard Server 2008 (Terminal Server) DNS on SBS - all wks pointed to SBS for DNS One wks and the SBS server have no problem, all others wks and the terminal server do. I just found out one wks can connect without issue when I was told before all of them had the issue. I just reconfirmed that if you either click cancel or try to authenticate three times, you just get a blank page. Friendly errors are turned off. I believe the one wks that can connect either doesn't have an update, the others have, has an update the others do not have and needs one to correct this issue (like with SBS 2K3) or may have something configured uniquely. I have confirmed all wks get their DNS/DHCP from SBS, including the one that works. The only thing unique on this network is the following: Windows 2008 adds a local DNS entry for the public FQDN pointing it to the internal address of the SBS server. This caused an issue with a vertical app they run. To work around this issue, we had to make a HOSTS entry giving that address the external address. Even though RDP was calling server.domain.local, it couldn't connect until remote.domain.com had a HOSTS entry pointing to the external FQDN. The internal address for the SBS server is: 10.0.1.2/24 DHCP/DNS: 10.0.1.2/24 DFG: 10.0.1.1/24 Internal FQDN: server.domain.local External FQDN: remote.domain.com IPCONFIG /all info (anonymized) Server: C:\>ipconfig /all Windows IP Configuration Host Name . . . . . . . . . . . . : SERVER Primary Dns Suffix . . . . . . . : domain.local Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : Yes WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : domain.local Ethernet adapter Local Area Connection 3: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet Physical Address. . . . . . . . . : 00-14-38-BE-9C-7F DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes Link-local IPv6 Address . . . . . : fe80::7124:2644:224a:240a%13(Preferred) IPv4 Address. . . . . . . . . . . : 10.0.1.2(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 10.0.1.1 DHCPv6 IAID . . . . . . . . . . . : 301995064 DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-10-E7-D3-A9-00-50-8D-B7-6F-DA DNS Servers . . . . . . . . . . . : 10.0.1.2 Primary WINS Server . . . . . . . : 10.0.1.2 NetBIOS over Tcpip. . . . . . . . : Enabled Tunnel adapter Local Area Connection* 8: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : isatap.{ECCEB2F3-F9C5-4920-B66C-E25181A36 8FF} Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes Terminal Server: C:\>ipconfig /all Windows IP Configuration Host Name . . . . . . . . . . . . : TS Primary Dns Suffix . . . . . . . : domain.local Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : domain.local Ethernet adapter Local Area Connection 2: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Realtek RTL8169/8110 Family PCI Gigabit E thernet NIC (NDIS 6.0) #2 Physical Address. . . . . . . . . : 00-50-8D-B7-6F-DB DHCP Enabled. . . . . . . . . . . : Yes Autoconfiguration Enabled . . . . : Yes Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Realtek RTL8169/8110 Family PCI Gigabit E thernet NIC (NDIS 6.0) Physical Address. . . . . . . . . : 00-50-8D-B7-6F-DA DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes Link-local IPv6 Address . . . . . : fe80::75f6:9d63:cce1:4f60%10(Preferred) IPv4 Address. . . . . . . . . . . : 10.0.1.3(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 10.0.1.1 DHCPv6 IAID . . . . . . . . . . . : 167792781 DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-11-A0-FE-D3-00-50-8D-B7-6F-DA DNS Servers . . . . . . . . . . . : 10.0.1.2 Primary WINS Server . . . . . . . : 10.0.1.2 NetBIOS over Tcpip. . . . . . . . : Enabled Tunnel adapter Local Area Connection* 8: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : isatap.{32CA6DB0-4FE7-4373-9C02-B4DF933BD 80C} Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes Tunnel adapter Local Area Connection* 9: Media State . . . . . . . . . . . : Media disconnected Connection-specific DNS Suffix . : Description . . . . . . . . . . . : isatap.{6ABF47EF-8F68-4FC8-BFB0-0E2DA262B D6A} Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes "Russ SBITS.Biz [SBS-MVP]" wrote: > SBS2003 or SBS2008 > > If SBS2003 > First try re Running the CEICW > to see If it will reset the permissions. > (There may be some settings in IIS that are not correct.) > > If SBS2008 Fix network Connection wizard. > > If that doesn't work is the PC's set up to use the SBS has the DHCP Server? > and the PC's have the IP of the SBS box as the DNS > > If you don't know, post the > IPCONFIG /ALL > from the SBS server > and one of the Affected Machines. > > has anything Changed since this started happening? > updates? etc. > And are you up to date on all Service packs > Patches etc? > > Sometimes just making sure updates > and the server has been restarted will fix things > > Russ > > -- > Russell Grover - SBITS.Biz [SBS-MVP] > MCP, MCPS, MCNPS, SBSC > Small Business Server/Computer Support - www.SBITS.Biz > Question or Second Opinion - www.PersonalITConsultant.com > BPOS - Microsoft Online Services - www.Microsoft-Online-Services.com > http://www.twitter.com/SBITSdotBiz > > "Roland Hall" <RolandHall(a)discussions.microsoft.com> wrote in message > news:F7293983-E61E-4324-B039-1C135D3F001F(a)microsoft.com... > > Users are prompted for credentials when the default page > > (http://companyweb/) > > loads in IE. Providing credentials will not make a connection but > > continue > > to request credentials. > > > > This issue affects all wks and the terminal server. If on the SBS Server, > > this issue does not appear. I can also, internally and externally connect > > to > > RWW and then select internal web and when asked for credentials, I can > > connect with a normal user account. So, it appears, if I'm not mistaken, > > that unless I'm logged in directly to the console, via TS or though RWW, > > access to Companyweb will prompt for credentials and fail to connect. > > > > I was following a discussion where Chad A. Gross was helping someone with > > this same issue (Mar. 2009) but the discussion ends without a solution. > > http://www.tech-archive.net/Archive/Windows/microsoft.public.windows.server.sbs/2009-03/msg02829.html > > > >
From: Roland Hall on 14 Apr 2010 15:52 I ran the "Fix my network" wizard and got these responses. 1. No primary network adapter found This could be related to MSFT turning on the broadcast flag since Vista but it's only supposed to effect non-MSFT DHCP servers or those that cannot deal with the broadcast flag being enabled. Clearly in my config you can see the primary adapter is enabled and functioning. This must a a MSFT definition of what a primary network adapter is. 2. The DHCP server is not listening to the IP address of the primary network adapter. Duh! If it can't see the primary network adapter, then how could the DHCP server listen to it? Again, this erroneous, because DHCP leases are functioning as expected. 3. DNS is using a DNS forwarder. Isn't this by design to have forwarders, pointing to your ISPs DNS servers, so anything outside the local subnet can be located? It is also set to use Root Hints should my forwarders be down. "Roland Hall" wrote: > Users are prompted for credentials when the default page (http://companyweb/) > loads in IE. Providing credentials will not make a connection but continue > to request credentials. > > This issue affects all wks and the terminal server. If on the SBS Server, > this issue does not appear. I can also, internally and externally connect to > RWW and then select internal web and when asked for credentials, I can > connect with a normal user account. So, it appears, if I'm not mistaken, > that unless I'm logged in directly to the console, via TS or though RWW, > access to Companyweb will prompt for credentials and fail to connect. > > I was following a discussion where Chad A. Gross was helping someone with > this same issue (Mar. 2009) but the discussion ends without a solution. > http://www.tech-archive.net/Archive/Windows/microsoft.public.windows.server.sbs/2009-03/msg02829.html > >
From: Russ SBITS.Biz [SBS-MVP] on 17 Apr 2010 00:51
Instead of using a Hosts file why aren't you using the DNS on the SBS to set things up? (IMO Hosts Files on PC's just creates an administrative nightmare.) Russ -- Russell Grover - SBITS.Biz [SBS-MVP] MCP, MCPS, MCNPS, SBSC Small Business Server/Computer Support - www.SBITS.Biz Question or Second Opinion - www.PersonalITConsultant.com BPOS - Microsoft Online Services - www.Microsoft-Online-Services.com http://www.twitter.com/SBITSdotBiz "Roland Hall" <RolandHall(a)discussions.microsoft.com> wrote in message news:839EBF8B-DC7A-49F7-A467-DB23E61CC7E9(a)microsoft.com... > SBS 2008 > Standard Server 2008 (Terminal Server) > > DNS on SBS - all wks pointed to SBS for DNS > One wks and the SBS server have no problem, all others wks and the > terminal > server do. I just found out one wks can connect without issue when I was > told before all of them had the issue. > > I just reconfirmed that if you either click cancel or try to authenticate > three times, you just get a blank page. Friendly errors are turned off. > > I believe the one wks that can connect either doesn't have an update, the > others have, has an update the others do not have and needs one to correct > this issue (like with SBS 2K3) or may have something configured uniquely. > > I have confirmed all wks get their DNS/DHCP from SBS, including the one > that > works. > > The only thing unique on this network is the following: > > Windows 2008 adds a local DNS entry for the public FQDN pointing it to the > internal address of the SBS server. This caused an issue with a vertical > app > they run. To work around this issue, we had to make a HOSTS entry giving > that address the external address. Even though RDP was calling > server.domain.local, it couldn't connect until remote.domain.com had a > HOSTS > entry pointing to the external FQDN. > > The internal address for the SBS server is: 10.0.1.2/24 > DHCP/DNS: 10.0.1.2/24 > DFG: 10.0.1.1/24 > > Internal FQDN: server.domain.local > External FQDN: remote.domain.com > > IPCONFIG /all info (anonymized) > Server: > > C:\>ipconfig /all > > Windows IP Configuration > > Host Name . . . . . . . . . . . . : SERVER > Primary Dns Suffix . . . . . . . : domain.local > Node Type . . . . . . . . . . . . : Hybrid > IP Routing Enabled. . . . . . . . : Yes > WINS Proxy Enabled. . . . . . . . : No > DNS Suffix Search List. . . . . . : domain.local > > Ethernet adapter Local Area Connection 3: > > Connection-specific DNS Suffix . : > Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet > Physical Address. . . . . . . . . : 00-14-38-BE-9C-7F > DHCP Enabled. . . . . . . . . . . : No > Autoconfiguration Enabled . . . . : Yes > Link-local IPv6 Address . . . . . : > fe80::7124:2644:224a:240a%13(Preferred) > IPv4 Address. . . . . . . . . . . : 10.0.1.2(Preferred) > Subnet Mask . . . . . . . . . . . : 255.255.255.0 > Default Gateway . . . . . . . . . : 10.0.1.1 > DHCPv6 IAID . . . . . . . . . . . : 301995064 > DHCPv6 Client DUID. . . . . . . . : > 00-01-00-01-10-E7-D3-A9-00-50-8D-B7-6F-DA > > DNS Servers . . . . . . . . . . . : 10.0.1.2 > Primary WINS Server . . . . . . . : 10.0.1.2 > NetBIOS over Tcpip. . . . . . . . : Enabled > > Tunnel adapter Local Area Connection* 8: > > Media State . . . . . . . . . . . : Media disconnected > Connection-specific DNS Suffix . : > Description . . . . . . . . . . . : > isatap.{ECCEB2F3-F9C5-4920-B66C-E25181A36 > 8FF} > Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 > DHCP Enabled. . . . . . . . . . . : No > Autoconfiguration Enabled . . . . : Yes > > Terminal Server: > > C:\>ipconfig /all > > Windows IP Configuration > > Host Name . . . . . . . . . . . . : TS > Primary Dns Suffix . . . . . . . : domain.local > Node Type . . . . . . . . . . . . : Hybrid > IP Routing Enabled. . . . . . . . : No > WINS Proxy Enabled. . . . . . . . : No > DNS Suffix Search List. . . . . . : domain.local > > Ethernet adapter Local Area Connection 2: > > Media State . . . . . . . . . . . : Media disconnected > Connection-specific DNS Suffix . : > Description . . . . . . . . . . . : Realtek RTL8169/8110 Family PCI > Gigabit E > thernet NIC (NDIS 6.0) #2 > Physical Address. . . . . . . . . : 00-50-8D-B7-6F-DB > DHCP Enabled. . . . . . . . . . . : Yes > Autoconfiguration Enabled . . . . : Yes > > Ethernet adapter Local Area Connection: > > Connection-specific DNS Suffix . : > Description . . . . . . . . . . . : Realtek RTL8169/8110 Family PCI > Gigabit E > thernet NIC (NDIS 6.0) > Physical Address. . . . . . . . . : 00-50-8D-B7-6F-DA > DHCP Enabled. . . . . . . . . . . : No > Autoconfiguration Enabled . . . . : Yes > Link-local IPv6 Address . . . . . : > fe80::75f6:9d63:cce1:4f60%10(Preferred) > IPv4 Address. . . . . . . . . . . : 10.0.1.3(Preferred) > Subnet Mask . . . . . . . . . . . : 255.255.255.0 > Default Gateway . . . . . . . . . : 10.0.1.1 > DHCPv6 IAID . . . . . . . . . . . : 167792781 > DHCPv6 Client DUID. . . . . . . . : > 00-01-00-01-11-A0-FE-D3-00-50-8D-B7-6F-DA > > DNS Servers . . . . . . . . . . . : 10.0.1.2 > Primary WINS Server . . . . . . . : 10.0.1.2 > NetBIOS over Tcpip. . . . . . . . : Enabled > > Tunnel adapter Local Area Connection* 8: > > Media State . . . . . . . . . . . : Media disconnected > Connection-specific DNS Suffix . : > Description . . . . . . . . . . . : > isatap.{32CA6DB0-4FE7-4373-9C02-B4DF933BD > 80C} > Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 > DHCP Enabled. . . . . . . . . . . : No > Autoconfiguration Enabled . . . . : Yes > > Tunnel adapter Local Area Connection* 9: > > Media State . . . . . . . . . . . : Media disconnected > Connection-specific DNS Suffix . : > Description . . . . . . . . . . . : > isatap.{6ABF47EF-8F68-4FC8-BFB0-0E2DA262B > D6A} > Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0 > DHCP Enabled. . . . . . . . . . . : No > Autoconfiguration Enabled . . . . : Yes > > "Russ SBITS.Biz [SBS-MVP]" wrote: > >> SBS2003 or SBS2008 >> >> If SBS2003 >> First try re Running the CEICW >> to see If it will reset the permissions. >> (There may be some settings in IIS that are not correct.) >> >> If SBS2008 Fix network Connection wizard. >> >> If that doesn't work is the PC's set up to use the SBS has the DHCP >> Server? >> and the PC's have the IP of the SBS box as the DNS >> >> If you don't know, post the >> IPCONFIG /ALL >> from the SBS server >> and one of the Affected Machines. >> >> has anything Changed since this started happening? >> updates? etc. >> And are you up to date on all Service packs >> Patches etc? >> >> Sometimes just making sure updates >> and the server has been restarted will fix things >> >> Russ >> >> -- >> Russell Grover - SBITS.Biz [SBS-MVP] >> MCP, MCPS, MCNPS, SBSC >> Small Business Server/Computer Support - www.SBITS.Biz >> Question or Second Opinion - www.PersonalITConsultant.com >> BPOS - Microsoft Online Services - www.Microsoft-Online-Services.com >> http://www.twitter.com/SBITSdotBiz >> >> "Roland Hall" <RolandHall(a)discussions.microsoft.com> wrote in message >> news:F7293983-E61E-4324-B039-1C135D3F001F(a)microsoft.com... >> > Users are prompted for credentials when the default page >> > (http://companyweb/) >> > loads in IE. Providing credentials will not make a connection but >> > continue >> > to request credentials. >> > >> > This issue affects all wks and the terminal server. If on the SBS >> > Server, >> > this issue does not appear. I can also, internally and externally >> > connect >> > to >> > RWW and then select internal web and when asked for credentials, I can >> > connect with a normal user account. So, it appears, if I'm not >> > mistaken, >> > that unless I'm logged in directly to the console, via TS or though >> > RWW, >> > access to Companyweb will prompt for credentials and fail to connect. >> > >> > I was following a discussion where Chad A. Gross was helping someone >> > with >> > this same issue (Mar. 2009) but the discussion ends without a solution. >> > http://www.tech-archive.net/Archive/Windows/microsoft.public.windows.server.sbs/2009-03/msg02829.html >> > >> > |