Internet Explorer and Kernel mode authentication on IIS7

Discussion in 'ASP .Net Security' started by Peter Larsen [CPH], Jul 30, 2010.

  1. Hi,

    I have some websites on a test web server running IIS7.
    The sites use Windows Authentication with Kernel mode authentication - no impersonation or other authentication types.

    For some reasons, 2 sites is no longer accessible from Internet Explorer
    (IE8) - except if i disable Kernel-Mode authentication for the sites on the
    IIS OR disable Integrated Windows Authentication on internet explorer.

    I have tried to add one of the sites to another sites Application Pool (a
    site that still works with kernel-mode auth.), but with no luck. So it is
    not a Application Pool setting (that must be changed).

    I don't understand why some sites works with kernel-mode and other sites
    There where no problems yesterday.

    The problem exists for all computers on the intranet.

    What could it be ??

    Peter Larsen [CPH], Jul 30, 2010
    1. Advertisements

  2. Hi Peter,
    Let's simplify and narrow down the issue first. Is the symptom like below?

    Tested two sites (hosted on the same IIS 7) on one client machine with IE
    8. One works and another doesn't work. These two sites all use kernel mode
    authentication and looks has no difference. Kernel mode authentication
    seems to be the cause because it works if it's disabled.

    If so could you create a new simple site with kernel mode authentication to
    see whether this site works? BTW what response is returned when you access
    that non-working web site?

    Allen Chen
    Microsoft Online Support

    Delighting our customers is our #1 priority. We welcome your comments and
    suggestions about how we can improve the support we provide to you. Please
    feel free to let my manager know what you think of the level of service
    provided. You can send feedback directly to my manager at:

    Get notification to my posts through email? Please refer to

    Note: MSDN Managed Newsgroup support offering is for non-urgent issues
    where an initial response from the community or a Microsoft Support
    Engineer within 2 business day is acceptable. Please note that each follow
    up response may take approximately 2 business days as the support
    professional working with you may need further investigation to reach the
    most efficient resolution. The offering is not appropriate for situations
    that require urgent, real-time or phone-based interactions. Issues of this
    nature are best handled working with a dedicated Microsoft Support Engineer
    by contacting Microsoft Customer Support Services (CSS) at
    This posting is provided "AS IS" with no warranties, and confers no rights.
    Allen Chen [MSFT], Aug 2, 2010
    1. Advertisements

  3. Hi Allen,

    Thank you for your reply.
    The problem went away - i don't know why it appear and why it disappear
    again :-(

    Peter Larsen [CPH], Aug 11, 2010
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.