I all of a sudden started having a strange issue with my ISA with ie7.
Whenever anyone tries to get out through the ISA 2004 using ie7 it asks for your logon credentials. But with Firefox and ie6 it is fine.
When i changed my access rule to allow all users access to the itnernet and looked at the logging, the users from ie7 are showing as 'anonymous' but the firefox/ie6 users are showing as their logon.
Anyone had a similar problem or have any ideas? It just seemed to stop working one day.
Setup is ISA 2004 running on Windows 2003 SP1 in a Windows 2003 domain. All the users are domain users.
Is there any settings that are different in the proxy settings on the browser? That is kind of odd. I'll have to look around and test it on my side to see if I can reproduce your issue.
And all the ie settings for ie6 and ie7 are controlled through a group policy, which i am told hasn't been changed.
Nothing changed it just seemed to start happening one day. At first i thought it was an issue with the ISA talking to my Domain Controller, but that can't be the case if it is picking up the info when using Firefox and ie6. That is the only reason i am thinking the problem is steming from internet explorer 7
Open the Internet Options control panel, go to the advanced page, scroll down to the bottom, then turn off the option titled "Enable Integrated Authentication".
Close all your browser windows, then open up IE and try again.
IE7 seems to have issues with kerberos authentication against ISA. IE6 and firefox use NTLM authentication instead.
Open the Internet Options control panel, go to the advanced page, scroll down to the bottom, then turn off the option titled "Enable Integrated Authentication".
Close all your browser windows, then open up IE and try again.
IE7 seems to have issues with kerberos authentication against ISA. IE6 and firefox use NTLM authentication instead.
Open the Internet Options control panel, go to the advanced page, scroll down to the bottom, then turn off the option titled "Enable Integrated Authentication".
Close all your browser windows, then open up IE and try again.
IE7 seems to have issues with kerberos authentication against ISA. IE6 and firefox use NTLM authentication instead.
You have to write a .adm file to wodge the registry entry, but because it's not a fully managed registry entry you have to turn on the option to view it within gpedit, and additionally when the PC/user moves out of the scope of the policy it won't unset the value that you push.
It may be easier to change it in your logon script.
You have to write a .adm file to wodge the registry entry, but because it's not a fully managed registry entry you have to turn on the option to view it within gpedit, and additionally when the PC/user moves out of the scope of the policy it won't unset the value that you push.
It may be easier to change it in your logon script.
You have to write a .adm file to wodge the registry entry, but because it's not a fully managed registry entry you have to turn on the option to view it within gpedit, and additionally when the PC/user moves out of the scope of the policy it won't unset the value that you push.
It may be easier to change it in your logon script.