Welcome to ISAserver.org

WPAD Permissions?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> General >> WPAD Permissions?

Page: [1]

Message

<< Older Topic Newer Topic >>

WPAD Permissions? - 21.Oct.2005 10:18:00 AM

cs2

Posts: 4
Joined: 21.Oct.2005
Status: offline

We are using auto-discovery via DHCP and DNS. This works for IE clients set to auto-discovery.

However there are a couple of issues:

1) ISA Server

At the ISA Server, if I type into IE:

http://wpad/wpad.dat

I get a login prompt before I can access the file, i.e. before the Save As dialog appears. This doesn't make sense as Domain Admin is already logged on.

2) Firefox Clients

Firefox clients which use auto-discovery are prompted for username and password even when logged on as domain users. The dialog says:

Enter username and password for "" at http://wpad

There must be some permissions issue. Anybody seen this issue?

Thanks

Post #: 1

Featured Links*

RE: WPAD Permissions? - 21.Oct.2005 10:56:00 AM

LLigetfa

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline

AFAIK, ISA2K4SP1 was to have addressed the issue of WPAD perms. You could of course create an anonymous rule allowing access.

See also:
http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/ts_client_rules.mspx

(in reply to cs2)

Post #: 2

RE: WPAD Permissions? - 21.Oct.2005 11:11:00 AM

cs2

Posts: 4
Joined: 21.Oct.2005
Status: offline

Running ISA2K4SP1 v 4.0.2163.213.

Will check out the Permissions KB. Thanks.

(in reply to cs2)

Post #: 3

RE: WPAD Permissions? - 21.Oct.2005 2:05:00 PM

ClintD

Posts: 1833
Joined: 26.Jan.2001
From: Keller, TX
Status: offline

ISA SP1 incorporated the code to allow the anonymous retrieval of WPAD, but you still have to set the reg key to enable it. Prior to SP1, you had to install the hotfix and set the reg key.

SkipAuthenticationForRoutingInformation

That article isn't completely accurate by the way - the issue exists in Enterprise Edition - lemme get my old PSS buddies and ask them to elaborate on this. Enterprise Edition doesn't need SP1 for the code change, but it does need the attribute set. In Enterprise Edition, it's set through the COM property and not through a REG key as in Standard Edition.

[ October 21, 2005, 02:16 PM: Message edited by: ClintD ]

(in reply to cs2)

Post #: 4

RE: WPAD Permissions? - 24.Oct.2005 3:59:00 AM