Internet Explorer and Kernel mode authentication on IIS7

[Peter Larsen [CPH]]

Hi,

I have some websites on a test web server running IIS7.
The sites use Windows Authentication with Kernel mode authentication - no
asp.net impersonation or other authentication types.

For some reasons, 2 sites is no longer accessible from Internet Explorer
(IE8) - except if i disable Kernel-Mode authentication for the sites on the
IIS OR disable Integrated Windows Authentication on internet explorer.

I have tried to add one of the sites to another sites Application Pool (a
site that still works with kernel-mode auth.), but with no luck. So it is
not a Application Pool setting (that must be changed).

I don't understand why some sites works with kernel-mode and other sites
don't.
There where no problems yesterday.

The problem exists for all computers on the intranet.

What could it be ??

BR
Peter

 

[Allen Chen [MSFT]]

Hi Peter,

I don't understand why some sites works with kernel-mode and other sites
don't.
There where no problems yesterday.

Let's simplify and narrow down the issue first. Is the symptom like below?

Tested two sites (hosted on the same IIS 7) on one client machine with IE
8. One works and another doesn't work. These two sites all use kernel mode
authentication and looks has no difference. Kernel mode authentication
seems to be the cause because it works if it's disabled.

If so could you create a new simple site with kernel mode authentication to
see whether this site works? BTW what response is returned when you access
that non-working web site?

Regards,
Allen Chen
Microsoft Online Support

Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
(e-mail address removed).

==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/en-us/subscriptions/aa948868.aspx#notifications.

Note: MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 2 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions. Issues of this
nature are best handled working with a dedicated Microsoft Support Engineer
by contacting Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/en-us/subscriptions/aa948874.aspx
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Peter Larsen [CPH]]

Hi Allen,

Thank you for your reply.
The problem went away - i don't know why it appear and why it disappear
again :-(

BR
Peter