Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [windows-authentication]

Windows authentication (or Integrated Windows Authentication) is a process where connections to applications or external systems are automatically authenticated with the currently logged on Windows user. This functionality was first made available in Windows 2000.

Windows authentication (or Integrated Windows Authentication) is a process where connections to applications or external systems are automatically authenticated with the currently logged on Windows user. This functionality was first made available in Windows 2000.

IWA is not actually a standard or authentication protocol, but is a process that relies on the underlying authentication protocols used by Windows and an application that is aware of them to transparently pass authentication information along to the requesting server or service.

There is a brief summary of IWA/WA on Wikipedia, here.

289 questions
15
votes
4 answers

IIS 7.5: How to configure custom Authentication Error page with Windows Authentication. 401 header problems

I have a php website running under IIS 7.5. The site is secured by Windows authentication and that works fine: When users go to the site, they are asked for username/password and get through if authenticated. If users click Cancel or mistype…
trailmax
  • 253
  • 1
  • 3
  • 7
14
votes
3 answers

How did I get this Windows share to prompt for login?

Or: "Is this a thing? And how would I check if it was?" In an environment without a Domain Controller, when accessing a share on a Windows Server 2008 R2 box, from a remote computer without a matching user account on the server, (and connecting by…
NReilingh
  • 472
  • 3
  • 9
  • 24
12
votes
2 answers

Why won't RDP accept my stored credentials, and makes me manually enter it every time?

Trying to log in to an Amazon EC2 instance (running Windows Server 2012 R2) via RDP. It works, and I can connect, but having saved the credentials that worked, they never seem to be accepted on subsequent logins, always rejecting them and requiring…
Atario
  • 220
  • 1
  • 2
  • 5
11
votes
2 answers

Unable to assign group permissions with ICACLS on Windows Server 2012

I cannot get icacls to accept my group for adding permissions. I am using an elevated power shell with the following command: icacls 'C:/foo' /grant:r 'Group Foo':f I get the following error: Invalid parameter "Group Foo" I have tried using the…
user319862
  • 757
  • 2
  • 8
  • 18
11
votes
1 answer

Definition of BUILTIN\Users?

For a server on a Windows Domain, what is the membership of "BUILTIN\Users" exactly? (I figure this has an obvious answer, but googling hasn't given me any clear definitions)
codeulike
  • 998
  • 5
  • 16
  • 29
9
votes
2 answers

Windows Authentication behaves oddly when VPN'd

We've got a few apps that rely on windows authentication - a couple of web apps with AD auth turned on and we usually connect to our SQL servers with windows auth. This normally runs without a hitch. It doesn't work so well if we're VPN'd to a…
Dan F
  • 143
  • 1
  • 1
  • 7
9
votes
4 answers

Authentication via RADIUS : MSCHAPv2 Error 691

I am working on setting up authentication into an Acme Packet Net-Net 3820 (SBC) via RADIUS. The accounting side of things is working just fine with no issues. The authentication side of things is another matter. I can see from a packet capture that…
New Guy
  • 346
  • 2
  • 5
  • 12
9
votes
3 answers

Windows authentication to IIS on local server with fully qualified url

I have a web application set up in IIS 7 configured with Windows Authentication. I can authenticate to the machine via it's fully qualified url from any other machine and it uses the proper Domain. However, when I try to connect to the machine from…
roviuser
  • 255
  • 1
  • 2
  • 6
8
votes
2 answers

Risks of Kerberos Delegation

I've been spending hours upon hours trying to learn and understand Windows Authentication, Kerberos, SPNs, and Constrained Delegation in IIS 7.5. One thing I just don't get is why it is "risky" to leave delegation enabled (i.e. not disable…
Chiramisu
  • 600
  • 1
  • 3
  • 16
7
votes
2 answers

Why can a user log in via more than one UPN?

I've changed the for all users UPN suffix of a company from us.mycompany.local to mycompany.com in order to use claims-aware applications. In testing before the change I discovered that even if I changed the UPN suffix, a user could successfully…
Jim B
  • 23,938
  • 4
  • 35
  • 58
7
votes
2 answers

Integrated Windows Authentication with Chrome and FireFox

I have a webapplication which uses claims based authentication. The STS is ADFS 2.0. When I am in the intranet and use IE, IWA is used and no login dialog appears. When I am on the internet zone, the Forms based authentication of ADFS is used. Just…
Jaap
  • 241
  • 1
  • 3
  • 8
6
votes
2 answers

Minimum Number of Port need to Open between Windows Client & Domain Controller Only

I just want to know, which port need to be open if i place firewall between Windows Client ( XP or 7 ) and Domain Controller ( Window Server 2008 R2 ) Please note it is between Client and DC and not between DC to DC I have searched on google, but in…
Param
  • 1,347
  • 13
  • 34
  • 51
6
votes
2 answers

How come identical name and authentication between two windows PCs on same network works?

My Experiment So I set up a simple network with Two computers. Both on the same Work group. I created a LOCAL user 'A' with pasword 'A' in Computer 1. And then I created an identical named LOCAL user 'A' with identical password 'A' on Computer 2.…
user1034912
  • 1,335
  • 3
  • 14
  • 20
5
votes
1 answer

Where does Credential Manager store credentials on the file system?

I want to clear a users stored credentials on a remote machine. Without having to have the user login and open the Cred manager GUI or run CMDKEY with them logged in. Is there a place on the file system under the user's profile with the stored…
red888
  • 4,069
  • 16
  • 58
  • 104
5
votes
1 answer

IIS 8.5 Windows Authentication failing for some users

I have an application that was installed requiring Windows Authentication under Windows 2012, IIS 8.5. When certain users use the application, they're receiving a 401 error after the challenge/response. Others can use the site without problems. …
Clinton Pierce
  • 186
  • 2
  • 10
1
2 3
…
19 20