Welcome to ISAserver.org

IE7+ Web Proxy authentication on a Domain

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Web Proxy] >> Web Proxy Client >> IE7+ Web Proxy authentication on a Domain

Page: [1]

Message

<< Older Topic Newer Topic >>

IE7+ Web Proxy authentication on a Domain - 6.Aug.2010 4:22:23 AM

Doc Dish

Posts: 9
Joined: 15.Jun.2006
Status: offline

I have an ISA 2006 Standard Web Proxy in single adapter mode that uses Integrated Authentication to identify Active Directory users as they request Web resources. The Web access rule requires membership of a Global Group to allow browsing.

There are some user accounts not in this group, as their credentials are shared between a number of staff. I have set the ReturnAuthRequiredIfAuthUserDenied property on the ISA Server to TRUE so these accounts are prompted for alternate credentials if they try and access a Web resource.

We have only recently started deploying Internet Explorer 7 (don't ask!) to PCs and our Service Desk have noted that users of these shared credentials now have to enter their personal credentials in the form "DOMAIN\Username" to gain Web access, whereas previously with Internet Explorer 6, the bare username would suffice. If the bare username is entered into the authentication prompt on IE7+, an 'incorrect credentials message is returned and the username box is pre-filled with "ISASERVER\Username".

Does anyone know of a setting or configuration for Internet Explorer 7 that would permit the bare username to be used in this situation, or is a campaign of user education required?

Many thanks, Doc.