Tuesday, July 1, 2008

IE:Automatically Logon with current user name and password

Integrated Windows Authentication is about how the username and its password are sent across the network.

With Integrated Windows authentication (formerly called NTLM, and also known as Windows NT Challenge/Response authentication), the user name and password (credentials) are hashed before being sent across the network. When you enable Integrated Windows authentication, the client browser proves its knowledge of the password through a cryptographic exchange with your Web server, involving hashing.

To enable Integrated Windows Authentication, you access the Advanced Tab of Internet Options.


In IE browser, the user logon has many options:


  • anonymous logon

  • automatic logon only in Intranet zone

  • automatic logon with current user name and password

  • prompt for use name and password
IE browser -- Tools --Internet Options --Security --select Internet zone --click Custom Level button, and scroll down,
you will find the User Authentication.

I have a sharepoint site hosted in IIS 6, the users cannot automatically logon. The user must be prompted for user name and password. It annoys the customer.

After I add the sharepoint web application address, such as http://tlc-nifcs.dyndns.org/ to the Intranet zone. The user is automatically accessing the sharepoint.

You can also select the option for Internet zone: Automatic logon with current user name and password without adding the site address to the Intranet zone.





In the domain environment, you should use the Group Policy to control the automatically logon.



Computer Configuration--Administrative Templates

--Windows Components--Internet Explorer --Internet Control Panel

--Security Page--Internet Zone--Logon Options