Addresses without periods (such as are considered to be on the intranet (local) Internet Explorer passes credentials automatically. And it doesn't pass any credentials automatically. If the computer name portion of the requested URL contains periods (such as and ), Internet Explorer assumes that the requested address exists on the Internet. Internet Explorer must consider the requested URL to be on the intranet (local). Internet Explorer is the only browser that supports Windows-Integrated authentication (NTCR). The user's browser must be Internet Explorer. Or they must be in the trusted Windows NT-based or Windows 2000-based domains, in which the user's account can be granted permissions to resources on the IIS-based computer. Anonymous authentication is attempted first, followed by Windows-Integrated authentication, Digest authentication (if applicable), and finally Basic (clear text) authentication.īoth the client and the Web server must be in the same Microsoft Windows NT-based or Microsoft Windows 2000-based domain.
Windows-Integrated authentication, also known as Windows NT Challenge/Response, must be enabled in the Web site properties in IIS. The following conditions must be met for Internet Explorer to automatically authenticate a user's logon and password and maintain security: Internet Explorer prompts for a password when you're using Windows-Integrated authentication (Microsoft Windows NT Challenge/Response).
Windows Integrated authentication, Windows NT Challenge/Response (NTCR), and Windows NT LAN Manager (NTLM) are the same and are used synonymously throughout this article.
0 kommentar(er)
