Microsoft KB Archive/282062

= IIS Does Not Authenticate for the /_AuthChangeUrl URL =

Article ID: 282062

Article Last Modified on 9/23/2005

-

APPLIES TO


 * Microsoft Internet Information Services 5.0

-



This article was previously published under Q282062



SYMPTOMS
Internet Information Server (IIS) does not authenticate for the /_AuthChangeUrl URL, even if Anonymous access is disabled. /_AuthChangeUrl is a special URL that is used for the Password Change feature in IIS. When users change their password using the Password Change page in IIS, a POST is made to the special /_AuthChangeUrl URL. Regardless of the authentication methods on the site, the POST request is processed anonymously.



RESOLUTION
To resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

260910 How to Obtain the Latest Windows 2000 Service Pack

The English version of this fix should have the following file attributes or later:

Date       Time      Version        Size     File name - 1/17/2001 04:42p    5.0.2195.3162  357,136  W3svc.dll



STATUS
Microsoft has confirmed that this is a bug in the Microsoft products that are listed at the beginning of this article. This problem was first corrected in Windows 2000 Service Pack 3.



MORE INFORMATION
Because of this behavior, Microsoft Internet Explorer does not POST any data to /_AuthChangeUrl if the site is configured for Integrated Security. For additional information about the problem between Internet Explorer and NTLM authentication, click the article number below to view the article in the Microsoft Knowledge Base:

273573 IISADMPWD Password Change Pages Fail to Change Passwords When Using NTLM Authentication

Additional query words: kbIISCom

Keywords: kbbug kbfix kbqfe kbwin2000sp3fix kbhotfixserver KB282062

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.