IE 10 Prompting for credentials - Windows Authentication in IIS

All replies

• 

  

  1

  Sign in to vote

  Hi,

  is it a public website? Why are you using windows authentication? Are you using IE10 on a server version of windows?

  check YOUR IE security settings for the Internet zone.

   

  ---

  Rob^_^

  Sunday, May 5, 2013 4:53 AM
• 

  

  2

  Sign in to vote

  is the page being zoned into the "Local Intranet" zone by IE10 ? (confirm the current zone by checking the page properties)
  

  in the security settings for that zone, is User Auth -> Logon, set to automatic logon ?
  (this is an IE9 screengrab)

  

  comparing these settings to a machine that has IE7/8/9, are there differences?

  ---

  Don
  (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
  This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

  
  

  • Edited by DonPick Sunday, May 5, 2013 5:40 AM

  Sunday, May 5, 2013 5:38 AM
• 

  

  0

  Sign in to vote

  Hi Rob, Don,

  Thanks for replying so fast.

  As said previously :

  Is there a setting I can change on IIS or somewhere else to prevent being prompted in IE10?

  I don't want to add the website in the local intranet security in Internet Options because I do not want my 25k users to do it : I need to make it works like it used to with the previous versions of IE.

  I am using windows authentication because I am using SSO on my website. It is an intranet website.

   

  Its is working when adding the website in Local intranet. But I don't want to ask all my users to add the server name in local intranet sites. It was not the case in IE9/IE8..

  Thanks to both of you for replying so fast.

  Sunday, May 5, 2013 7:09 AM
• 

  

  1

  Sign in to vote

  Hi Rob, Don,

  Thanks for replying so fast.

  As said previously :

  Is there a setting I can change on IIS or somewhere else to prevent being prompted in IE10?

  I don't want to add the website in the local intranet security in Internet Options because I do not want my 25k users to do it : I need to make it works like it used to with the previous versions of IE.

  I am using windows authentication because I am using SSO on my website. It is an intranet website.

   

  Its is working when adding the website in Local intranet. But I don't want to ask all my users to add the server name in local intranet sites. It was not the case in IE9/IE8..

  Thanks to both of you for replying so fast.

  I wondered if you had found that in earlier versions (IE7/8/9), the website was (or not) correctly attracting the Local Intranet zone, which means the default for SSO/IWA would simply work. If this (correct zone) is not happening for IE10, then this would explain why SSO/IWA is not working by default.

  For us, our intranet webservers correctly attract the Local Intranet zone, so SSO/IWA simply works without me doing anything at all.
  This is the case for us with IE6/7/8/9/10. So for us, my SSO/IWA works.
  We do use proxy-auto-detect and also proxy-auto-configuration (wpad + proxy.pac), so it's easy for us, since all intranet webservers are not proxied, and all external webservers are proxied.
  I do have 50,000 machines under management, and I use AD GPO for most of that, but I don't have to do much to make this work for us :)
  
  I think if you find that it's not working for you, it's necessary to determine if you have some zone-determination problem, or, you can force the zone or you can lower the security settings. I know that you don't want to change the settings on all your pc's (I would not want to do that either).

  So, is it that you are enquiring about why IE10 doesn't seem to treat your intranet webserver with the same zone, as IE7/8/9 treat your webserver?

  ---

  Don
  (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
  This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

  
  

  • Edited by DonPick Sunday, May 5, 2013 7:30 AM

  Sunday, May 5, 2013 7:27 AM
• 

  

  0

  Sign in to vote

  Hi Don,

  I checked the setting : Automatic logon only in Intranet zones and both are checked in Local intranet.

  You are right, when I check the zone, I am on Internet Zone. Do you know how could I do to make my website detected in intranet zone? 

  Sunday, May 5, 2013 7:45 AM
• 

  

  0

  Sign in to vote

  And for your last question, yes this is exactly what I am wondering.
  

  • Edited by ckBy Sunday, May 5, 2013 8:00 AM

  Sunday, May 5, 2013 7:59 AM
• 

  

  0

  Sign in to vote

  if IE10 performs Intranet zone detection differently than IE6/7/8/9, that's news to me!

  these articles explain a little how it's supposed to work:

  http://support.microsoft.com/kb/2028170

  http://blogs.msdn.com/b/ieinternals/archive/2012/06/05/the-local-intranet-security-zone.aspx

  I think you should check to see if the pc in question does have some different settings in the proxy/connection configuration area of IE?
  (Tools, Options, Connections, etc)

  ---

  Don
  (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
  This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

  • Marked as answer by Leo Huang Tuesday, May 14, 2013 9:05 AM

  Sunday, May 5, 2013 8:17 AM
• 

  

  0

  Sign in to vote

  Hey Guys,

  I have created a detailed how-to article for fixing this exact problem for all computers on an Active Directory domain. Please refer to the following blog post.

  http://clintboessen.blogspot.com.au/2013/09/ie-10-prompting-for-credentials-windows.html

  Kind Regards,

  ---

  Clint Boessen MVP - Exchange Server, MCSE, MCITPx6, Dip Network Engineering
  Perth, Western Australia
  
  Blog: http://clintboessen.blogspot.com
  Employer: http://www.avantgardetechnologies.com.au
  
  Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • Proposed as answer by Clint Boessen Thursday, September 12, 2013 2:51 AM

  Thursday, September 12, 2013 2:51 AM