Windows Media Player Requests Authentication on Web Proxy Client Computers
Are you having problems with the Windows Media Player asking for authentication credentials on your Web proxy client computers? If so, I caught you! You should be using the Firewall client. Here’s the scoop:
Problem: A public Web site has a link to resources that require Windows Media Player. The resources are not opening properly.
Cause: Windows Media Player may be attempting to connect anonymously, and access is denied because authentication is required for the request.
Solution: Use either of the following workarounds:
• The preferred method, to authenticate traffic and log user names, is to install Firewall Client on client computers. Then Firewall Client authenticates on behalf of the application.
• Allow outgoing access without authentication by creating a rule to allow a set of computers anonymous outgoing access so that they can access the content. Such traffic will not be logged with a user name.
HTH,
Tom
Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
Email: tshinder@isaserver.org
MVP — Microsoft Firewalls (ISA)
Eske Fugl Says:
September 13th, 2007 at 3:33 am
Hi Tom,
First I want to thank you for a great blog and some invaluable help through this website and your books
I’m experiencing the described problem. When browsing websites with Windows Media Player videocontent, Windows Media Player will prompt for credentials.
I installed the Firewall Client without any effect. As far as I can see Windows Media Player is still acting as a web proxy client.
How would you ensure that Windows Media Player (or any other program) is actually using the Firewall Client.
I’ve solved the credentials problem by allowing unauthenticated access to html video content. But I would prefer to have all web browsing authenticated.
Regards,
Eske
tc2 Says:
January 9th, 2008 at 3:59 pm
Please post a reply to Eske’s question.
Thanks!
tshinder Says:
January 9th, 2008 at 5:21 pm
One more thing to try — in the Options dialog box, click the “Network” tab. Make sure for the “Streaming Proxy Settings” entries that all of them are set to “None”.
HTH,
Tom
Steve Says:
March 5th, 2008 at 8:50 am
Hi Tom,
I was just curious as to how this bit is done:
“Allow outgoing access without authentication by creating a rule to allow a set of computers anonymous outgoing access so that they can access the content. Such traffic will not be logged with a user name. ”
Is it done under Configurtation>Networks? Would I define a range of IP’s that would be excluded from authenticating?
Alternately, who do you go about implementing Eske’s solution of:
“I’ve solved the credentials problem by allowing unauthenticated access to html video content. But I would prefer to have all web browsing authenticated.”
My experience with ISA is limited so I’m learning things on the fly. Thanks for your help!
steve
Toby S Says:
December 16th, 2008 at 2:10 am
We’ve found setting the proxy without a fully qualified name seems to work.
For example “proxy” instead of “proxy.domain.com”.
Of course, from a security perspective, depending on your network name resolution order, it may be possible for someone else to register their own “proxy” entry that gets resolved before yours.
-Toby