Microsoft KB Archive/277362

= BUG: Users Are Prompted for Basic Authentication When Windows Authentication Is Disabled =

Article ID: 277362

Article Last Modified on 10/22/2003

-

APPLIES TO


 * Microsoft Commerce Server 2002 Standard Edition
 * Microsoft Commerce Server 2000 Standard Edition

-



This article was previously published under Q277362



SYMPTOMS
When you configure your Commerce Server site to use Windows Authentication, and then set the Authentication to None, users are prompted to authenticate using Basic Authentication when they browse the Web site.



CAUSE
When you configure a Commerce Server site for Windows Authentication, the Web server security is changed to Basic Authentication for all files and directories, except the AuthFiles directory (which is set to Allow Anonymous). After you remove Windows Authentication, permissions are not restored to their previous settings.



RESOLUTION
To reset the security on a Web site after you set the Authentication Filter to No Filter, do the following:
 * 1) Open the Internet Services Manager.
 * 2) Click to expand , and then expand .
 * 3) Right-click the directory where your Commerce site is installed, and then click Properties.
 * 4) On the Directory Security tab, click Anonymous access and authentication control, and then click Edit.
 * 5) To restore anonymous access to the site, click to check Anonymous access.
 * 6) Click OK twice to save the changes, and then close the property sheet.
 * 7) From the Start menu, click Run, and then type IISRESET.

Users should now be able to browse the site without being prompted for authentication.



STATUS
Microsoft has confirmed that this is a problem in Microsoft Commerce Server 2000.



MORE INFORMATION
When you configure Windows Authentication or Custom Authentication for a site, Commerce Server automatically sets the site's security to Basic Authentication (except the AuthFiles directory, which is set to Allow Anonymous). When you change the mode to No Filter, only the Commerce Admin Database is updated with the new authentication mode setting. The permissions on the site itself are not restored because there is no data of the previous permissions.

Additional query words: cs2k authfilter windows authentication

Keywords: kbbug kbnofix KB277362

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.