I have a windows integrated authentication web application located in my
machine, I am a domain user and I can access this web site from my machine or
remotely when I type my domain username and password to the popup windows
authentication window.

However, my colleagues(also are domain users in the same domain as me) can't
access this web site from their machines or remotely type in their domain
username and password in the popup window.

I try to debug the code but seems the 500 error occurs before the code have
been excuted so seems it's because IIS reject the request.

I turned off the display friendly http error page option in the IE, but I
only get a very simply error code : -2146893039 (0x80090311).

And I can't see any events that loged at that moment that I tried to access
the web site using my colleague's identity.

My set up for the site is:
only allow windows authentication,
in the virtual folder, allow everyone to have read&excute, list folder
contents and read.
in the web.config I didn't set impersonate to true.

I don't know what's wrong here, any ideas and suggestions are welcome.

Cheers

RE: domain users can't access the web site in my pc - HTTP 500 error by slowdance

slowdance
Mon Aug 29 06:05:01 CDT 2005


I just noticed that if I login as a local user(not domain user) I still can
access my web site!!! So I think maybe my site is not configured correctly to
only allow domain user. The site is located in my own machine(XP), I wonder
wehther I should put the site to the windows 2003 server which is the domain
controller.

So my new question is, to enable a web site to only allow domain users
access, should this web site locate in the domain controller server or can be
any of the machines with certain configuration?

Cheers

"slowdance" wrote:

> I have a windows integrated authentication web application located in my
> machine, I am a domain user and I can access this web site from my machine or
> remotely when I type my domain username and password to the popup windows
> authentication window.
>
> However, my colleagues(also are domain users in the same domain as me) can't
> access this web site from their machines or remotely type in their domain
> username and password in the popup window.
>
> I try to debug the code but seems the 500 error occurs before the code have
> been excuted so seems it's because IIS reject the request.
>
> I turned off the display friendly http error page option in the IE, but I
> only get a very simply error code : -2146893039 (0x80090311).
>
> And I can't see any events that loged at that moment that I tried to access
> the web site using my colleague's identity.
>
> My set up for the site is:
> only allow windows authentication,
> in the virtual folder, allow everyone to have read&excute, list folder
> contents and read.
> in the web.config I didn't set impersonate to true.
>
> I don't know what's wrong here, any ideas and suggestions are welcome.
>
> Cheers

Re:domain users can't access the web site in my pc - HTTP 500 error by Jesper

Jesper
Wed Sep 07 10:09:15 CDT 2005

Hi

I have had a similar problem. And 'solved' it by giving all domain users
integrated windows autentification in IE 6.

Our problem arised after repairing an old intranet server. Maybe the new
installed server extension 4.0.2.7802 is more restrictive.

Have you in the meantime got an real explanation ?

Kragh

Re:domain users can't access the web site in my pc - HTTP 500 erro by slowdance

slowdance
Thu Sep 08 16:21:03 CDT 2005

Hello,

I haven't solve my problem yet, I still have no idea how to set up a site in
my machine (XP, not the win2k3 server) to allow domain user access. So as
long as I put the site on my machine, only users in my machine and my domain
user can access. So in the end I have to move the site to the win2k3 server...

Cheers

"Jesper Kragh" wrote:

> Hi
>
> I have had a similar problem. And 'solved' it by giving all domain users
> integrated windows autentification in IE 6.
>
> Our problem arised after repairing an old intranet server. Maybe the new
> installed server extension 4.0.2.7802 is more restrictive.
>
> Have you in the meantime got an real explanation ?
>
> Kragh
>