Do You Get Prompted for Authentication When You Shouldn’t?
OK, you’ve configured your clients as both Firewall and Web Proxy clients, the ISA Firewall is a domain member, and the users have correctly logged into the domain. Everything looks good but you’re still ask by the ISA Firewall to authenticate! What’s up with that?
It should be that incorrect client credentials are being cached on the client computer. If so, do the following:
Solution: Clear the cached credentials, as follows:
1. Click Start, and then click Run.
2. In the Run dialog box, type control keymgr.dll. Then click OK.
3. In the Stored User Names and Passwords dialog box, select the entry that you want to remove, and then click Remove.
4. Click Close to close the Stored User Names and Passwords dialog box.
5. Restart the client computer
HTH,
Tom
Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
Email: tshinder@isaserver.org
MVP — Microsoft Firewalls (ISA)
AlanWood Says:
June 1st, 2007 at 4:34 pm
This is very common with mobile users as well and VPN’s. It wil happen with any application that uses authentication. Seen it alot with outlook. If that isn’t what the problem is and I see this quit often. You may want to look at the following article as you could have too many Logon Requests queued up on your ISA or possibly your DC. Use this with caution as it could bring a busy DC to it’s knees.
326040 How to configure an ISA Server computer for a very large number of authentication requests
http://support.microsoft.com/default.aspx?scid=kb;...326040
Thank you!
Alan
Thomas Shinder Says:
June 19th, 2007 at 9:55 am
Hi Alan,
Nice tip!
Thanks!
Tom
Scott Kready Says:
November 1st, 2007 at 7:26 am
Great tip, Tom! Helped me out of a jam.
Thank you!
Scott
Tom Shinder Says:
November 1st, 2007 at 7:28 am
Glad it helped!
Tom