Internet Explorer and Kernel mode authentication on IIS7


Peter Larsen [CPH]


I have some websites on a test web server running IIS7.
The sites use Windows Authentication with Kernel mode authentication - no impersonation or other authentication types.

For some reasons, 2 sites is no longer accessible from Internet Explorer
(IE8) - except if i disable Kernel-Mode authentication for the sites on the
IIS OR disable Integrated Windows Authentication on internet explorer.

I have tried to add one of the sites to another sites Application Pool (a
site that still works with kernel-mode auth.), but with no luck. So it is
not a Application Pool setting (that must be changed).

I don't understand why some sites works with kernel-mode and other sites
There where no problems yesterday.

The problem exists for all computers on the intranet.

What could it be ??


Allen Chen [MSFT]

Hi Peter,
I don't understand why some sites works with kernel-mode and other sites
There where no problems yesterday.

Let's simplify and narrow down the issue first. Is the symptom like below?

Tested two sites (hosted on the same IIS 7) on one client machine with IE
8. One works and another doesn't work. These two sites all use kernel mode
authentication and looks has no difference. Kernel mode authentication
seems to be the cause because it works if it's disabled.

If so could you create a new simple site with kernel mode authentication to
see whether this site works? BTW what response is returned when you access
that non-working web site?

Allen Chen
Microsoft Online Support

Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
(e-mail address removed).

Get notification to my posts through email? Please refer to

Note: MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 2 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions. Issues of this
nature are best handled working with a dedicated Microsoft Support Engineer
by contacting Microsoft Customer Support Services (CSS) at
This posting is provided "AS IS" with no warranties, and confers no rights.

Peter Larsen [CPH]

Hi Allen,

Thank you for your reply.
The problem went away - i don't know why it appear and why it disappear
again :-(


Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Members online

Forum statistics

Latest member

Latest Threads