I've spent the past two days reading your website and talking with IBM's Microsoft Support, which the tech finally admitted that he was getting his info from you site anyway. I can't seem to figure out how to get embeded .wmv files to play without our users having to logon in a dialog box.
Here's the setup:
I've got a Win2k SP4 server with ISA 2004 SP1 on it and it is a domain member server. This is a fresh install, not an upgrade. Standard 2 network card install with ports all matched with the switches. I have 2 policy rules in place, one to allow our internal DNS servers to do DNS lookups on the internet and another to allow only the Internet Users group from AD to the internet. ISA Firewall client loaded on each pc. A .pac script that directs all external internet explorer traffic to the ISA server, and bypasses the proxy for all internal IIS servers. Our IT policy requires authentication for any internet connectivity.
I have been doing some testing with which all went well except we cannot view any Windows Media files that are embeded within a web page. We get this on both Win2k and WinXP computers with Media Player 10.00.00.3646, 9.00.00.3128, and 9.00.00.3250. I can download any .wmv file from any site with no problems but if the file is to be played in a web page it doesn't load and I get an error that the proxy server is denying access. If I disable the firewall client I get the logon dialog box. If I logon with the same credentials that I logged onto the computer with it will download and play the file within the website. If I don't logon I get the same error within Windows Media player as when the firewall client is turned on.
Contacted Microsoft Support and they told me to manually add the MIME listings into the Video Content Type (even though Video/* is already listed) and to add the extensions. That didn't help. We also tried all of the proxy settings within Windows Media Player with no luck as well.
I tried going to: ISA Console, Server, Config, Networks. Internal (and external) network properties, Web Proxy tab, Authentication: Integrated authentication checked and no check to requite all users to authenticate. That didn't help either. I get the same results.
If I point the computers to our ISA 2000 server it works fine.
I also tried creating another policy for this content type and put it as the first policy. That didn't help either.
I just checked to make sure that the server was checking AD for rights and it is. I did this by logging into the pc with an account that has internet access rights. Opened a web page and browsed to a site with an embeded WM file. I logged into the dialog box with the same credentials that I logged onto the computer with. Then I changed the password for that user via AD Users and Computers without logging out of the computer. I tried to go to any other site and I was unable to and received another dialog box to logon again.
At this point I'm not sure what to do. Any help would be awesome!
I just got off a 4 hour and 40 minute call with IBM (their Microsoft Support) and 3 Microsoft Techs. We finally figured out what was happening.
On our Windows 2000 clients Internet Explorer wasn't enabled to use Integrated Windows Authentication on the Advanced tab. Once we checked that Windows 200 with either WMP 9 or 10 started working.
On our Windows XP clients we had to go to Tools, Options, and the Network tab within Windows Media Player (version 9 and 10). Within there we had to set the HTTP protocol setting to None for the proxy. What we were seeing on the proxy was that WMP would request the file using anonymous credentials like it always does first.. Per our policy rules ISA would deny access to any anonymous access but WMP wouldn't resend the request because it thinks that the credentials were being supplied by IE. Once we changed it to use None for the proxy settings and monitored the traffic again we noticed that WMP would request the file with anonymous credentials, be denied, and then request it again with credentials of the logged on user and it would succeed.
I just checked and if I point these clients to our ISA 2000 server (without making the change to WMP) I get a logon dialog as well. If I make the WMP change it works through it as well.
I thought it might have something to do with the fact that we're using a .pac file to direct IE to our proxy server but I also tested by setting the proxy settings on these clients to point directly to the ISA servers and we still get the logon dialog boxes.
The only way to get them to go away was to make the change within WMP.
Posts: 19
Joined: 8.May2001
From: Florida - USA
Status: offline
Thank You, Thank You, very much. We too were having this problem and it has been driving us crazy. Atleast your vendor helped you out, ours told us we needed a new server.
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
Printable Version
All Forums >> [ISA Server 2004 Firewall] >> Access Policies >> Logon dialog box for embeded Windows Media Player files only. 
Logon dialog box for embeded Windows Media Player files... - !["[Smile]"](/image/smiles/smile.gif "\"\"")
I can't seem to figure out how to get embeded .wmv files to play without our users having to logon in a dialog box.
RE: Logon dialog box for embeded Windows Media Player f... - 
New Messages
No New Messages
Hot Topic w/ New Messages
Hot Topic w/o New Messages
Locked w/ New Messages
Locked w/o New Messages
Post New Thread