• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

ie7 Issue

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> General >> ie7 Issue Page: [1]
Login
Message << Older Topic   Newer Topic >>
ie7 Issue - 30.Mar.2007 8:54:52 AM   
JUMPURS

 

Posts: 6
Joined: 31.Mar.2004
Status: offline
I all of a sudden started having a strange issue with my ISA with ie7.

Whenever anyone tries to get out through the ISA 2004 using ie7 it asks for your logon credentials. But with Firefox and ie6 it is fine.

When i changed my access rule to allow all users access to the itnernet and looked at the logging, the users from ie7 are showing as 'anonymous' but the firefox/ie6 users are showing as their logon.

Anyone had a similar problem or have any ideas? It just seemed to stop working one day.

Setup is
ISA 2004 running on Windows 2003 SP1 in a Windows 2003 domain.
All the users are domain users.
Post #: 1
RE: ie7 Issue - 30.Mar.2007 9:55:05 AM   
jay24k

 

Posts: 22
Joined: 18.May2005
Status: offline
Is there any settings that are different in the proxy settings on the browser? That is kind of odd. I'll have to look around and test it on my side to see if I can reproduce your issue.

(in reply to JUMPURS)
Post #: 2
RE: ie7 Issue - 30.Mar.2007 10:24:53 AM   
JUMPURS

 

Posts: 6
Joined: 31.Mar.2004
Status: offline
Nope the settings are the same in Firefox and ie7

And all the ie settings for ie6 and ie7 are controlled through a group policy, which i am told hasn't been changed.

Nothing changed it just seemed to start happening one day. At first i thought it was an issue with the ISA talking to my Domain Controller, but that can't be the case if it is picking up the info when using Firefox and ie6. That is the only reason i am thinking the problem is steming from internet explorer 7

(in reply to JUMPURS)
Post #: 3
RE: ie7 Issue - 2.Apr.2007 11:54:09 AM   
micm

 

Posts: 12
Joined: 15.Jan.2007
Status: offline
Open the Internet Options control panel, go to the advanced page, scroll down to the bottom, then turn off the option titled "Enable Integrated Authentication".

Close all your browser windows, then open up IE and try again.

IE7 seems to have issues with kerberos authentication against ISA.  IE6 and firefox use NTLM authentication instead.

(in reply to JUMPURS)
Post #: 4
RE: ie7 Issue - 2.Apr.2007 11:54:11 AM   
micm

 

Posts: 12
Joined: 15.Jan.2007
Status: offline
Open the Internet Options control panel, go to the advanced page, scroll down to the bottom, then turn off the option titled "Enable Integrated Authentication".

Close all your browser windows, then open up IE and try again.

IE7 seems to have issues with kerberos authentication against ISA.  IE6 and firefox use NTLM authentication instead.

(in reply to JUMPURS)
Post #: 5
RE: ie7 Issue - 2.Apr.2007 11:54:11 AM   
micm

 

Posts: 12
Joined: 15.Jan.2007
Status: offline
Open the Internet Options control panel, go to the advanced page, scroll down to the bottom, then turn off the option titled "Enable Integrated Authentication".

Close all your browser windows, then open up IE and try again.

IE7 seems to have issues with kerberos authentication against ISA.  IE6 and firefox use NTLM authentication instead.

(in reply to JUMPURS)
Post #: 6
RE: ie7 Issue - 3.Apr.2007 3:40:46 AM   
JUMPURS

 

Posts: 6
Joined: 31.Mar.2004
Status: offline
That done it, thanks.

Another quick question though, is there a way to do this via group policy to save me changing every user?

Cheers

(in reply to micm)
Post #: 7
RE: ie7 Issue - 3.Apr.2007 5:10:15 AM   
micm

 

Posts: 12
Joined: 15.Jan.2007
Status: offline
Not easily or nicely.

You have to write a .adm file to wodge the registry entry, but because it's not a fully managed registry entry you have to turn on the option to view it within gpedit, and additionally when the PC/user moves out of the scope of the policy it won't unset the value that you push.

It may be easier to change it in your logon script.

(in reply to JUMPURS)
Post #: 8
RE: ie7 Issue - 3.Apr.2007 5:10:16 AM   
micm

 

Posts: 12
Joined: 15.Jan.2007
Status: offline
Not easily or nicely.

You have to write a .adm file to wodge the registry entry, but because it's not a fully managed registry entry you have to turn on the option to view it within gpedit, and additionally when the PC/user moves out of the scope of the policy it won't unset the value that you push.

It may be easier to change it in your logon script.

(in reply to JUMPURS)
Post #: 9
RE: ie7 Issue - 3.Apr.2007 5:10:19 AM   
micm

 

Posts: 12
Joined: 15.Jan.2007
Status: offline
Not easily or nicely.

You have to write a .adm file to wodge the registry entry, but because it's not a fully managed registry entry you have to turn on the option to view it within gpedit, and additionally when the PC/user moves out of the scope of the policy it won't unset the value that you push.

It may be easier to change it in your logon script.

(in reply to JUMPURS)
Post #: 10

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> General >> ie7 Issue Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts