Host headers and integrated windows authentication problems

Hi,

here's the problem. It's fairly long......and it is seriously starting to
annoy me too!

IIS5 - Windows 2000 Server

I've created a new website called Systems Team. It's running on port 80,
same port as the default site, so I've given it a host header of
systems.test.co.uk. The bit after systems is our domain name.

I've created a DNS entry in our test.co.uk zone called Systems pointing to
the IP of the server.

No problems so far. All website access is fine using a URL of
http://systems.test.co.uk.

Now, when I restrict permissions on the folder that the website maps to it
all goes pear shaped. I have permissions set so that only Domain Admins have
rights to the folder. The website is configured for Integrated
Authentication and Basic Authentication. Basic is so that we can access it
if we're not logged into a PC as ourselves.

Now when I go to systems.test.co.uk, I get prompted for a username and
password. If I enter my details which I'm already logged on with, I get in
fine. So for some reason, the integrated authentication isn't working.

Now if I remove this new site, add a Virtual Directory under the default
site, so I just reference the site by http://servername/systems I get in
with no problems.

Soooo...it seems to be a problem with using Host Headers and permissions on
the website folder.

Anyone got any ideas?

Cheers,

Adam

"Adam Nickells" <adamnickells.TakeThisOut@hotmail.com> wrote in message
news:1066659813.588339@ananke.eclipse.net.uk...
 > Hi,
 >
 > here's the problem. It's fairly long......and it is seriously starting to
 > annoy me too!
 >
 > IIS5 - Windows 2000 Server
 >
 > I've created a new website called Systems Team. It's running on port 80,
 > same port as the default site, so I've given it a host header of
 > systems.test.co.uk. The bit after systems is our domain name.
 >
 > I've created a DNS entry in our test.co.uk zone called Systems pointing to
 > the IP of the server.
 >
 > No problems so far. All website access is fine using a URL of
<font color=purple> > <a style='text-decoration: underline;' href="http://systems.test.co.uk.</font" target="_blank">http://systems.test.co.uk.</font</a>>
 >
 > Now, when I restrict permissions on the folder that the website maps to it
 > all goes pear shaped. I have permissions set so that only Domain Admins
have
 > rights to the folder. The website is configured for Integrated
 > Authentication and Basic Authentication. Basic is so that we can access it
 > if we're not logged into a PC as ourselves.
 >
 > Now when I go to systems.test.co.uk, I get prompted for a username and
 > password. If I enter my details which I'm already logged on with, I get in
 > fine. So for some reason, the integrated authentication isn't working.
 >
 > Now if I remove this new site, add a Virtual Directory under the default
 > site, so I just reference the site by <a style='text-decoration: underline;' href="http://servername/systems" target="_blank">http://servername/systems</a> I get in
 > with no problems.
 >
 > Soooo...it seems to be a problem with using Host Headers and permissions
on
 > the website folder.
 >
 > Anyone got any ideas?

Are you sure IE has been configured correctly to know that the FQDN is part
of your intranet? By default, it knows that a simple servername is.

In IE, Go to Tools -> Internet Options -> Security -> Custom Level -> User
Authentication -> Logon and make sure it's not prompting for intranet use.
You can also add your domain or IP to the no proxy setting to get IE to
recognize it as the intranet. Tools -> Internet Options -> Connections ->
LAN Settings -> Advanced.

For security configuration you need to go Tools > Internet Options >
Security > Local intranet > Sites... > Advanced > Add this web site or IP to
the zone.

--
Tom Kaminski IIS MVP
<a style='text-decoration: underline;' href="http://www.iistoolshed.com/" target="_blank">http://www.iistoolshed.com/</a> - tools, scripts, and utilities for running IIS
<a style='text-decoration: underline;' href="http://mvp.support.microsoft.com/" target="_blank">http://mvp.support.microsoft.com/</a>
<a style='text-decoration: underline;' href="http://www.microsoft.com/windowsserver2003/community/centers/iis/" target="_blank">http://www.microsoft.com/windowsserver2003/community/centers/iis/</a><!-- ~MESSAGE_AFTER~ -->