Microsoft KB Archive/273573

= IISADMPWD Password Change Pages Fail to Change Passwords When Using NTLM Authentication =

Article ID: 273573

Article Last Modified on 1/29/2007

-

APPLIES TO


 * Microsoft Internet Explorer 5.5
 * Microsoft Internet Explorer 5.01
 * Microsoft Internet Explorer 5.0
 * Microsoft Internet Explorer 5.0
 * Microsoft Internet Explorer 5.01
 * Microsoft Internet Explorer 5.0
 * Microsoft Internet Explorer 5.01
 * Microsoft Internet Explorer 5.0
 * Microsoft Internet Explorer 5.01
 * Microsoft Internet Explorer 5.0
 * Microsoft Internet Information Server 4.0

-



This article was previously published under Q273573



We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx



Important This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry



SYMPTOMS
User password changes fail are not accepted when using the password change pages provided under the IISADMPWD subweb in the default Web site.



CAUSE
This problem only occurs if the IISADMPWD subweb is set to use NTLM authentication, and the client is using Internet Explorer 5.0, 5.01, 5.01 SP1 or 5.5.

Internet Explorer 5.0 has a new feature named NTLM pre-authorization, which requires NTLM authentication for all visits after you visit one NTLM authenticated folder.



RESOLUTION
Make the following registry changes on the client workstation that is using Internet Explorer.

Warning If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.  Run Registry Editor (Regedit.exe or Regedt32.exe). Locate the following key in the registry:

HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Internet Settings/

 Add the following registry value:

Value Name: DisableNTLMPreAuth

Data Type: REG_DWORD

Value: 1





MORE INFORMATION
For more information, click the following article number to view the article in the Microsoft Knowledge Base:

251404 HTML file does not post data to a non-NTLM-authenticated Web site

Keywords: kbnofix kbprb kbfaq KB273573

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.