Repeated Intranet authentication prompts

I'm having trouble accessing an internal intranet site.
I get endless user name / password prompts.
I have the sites listed added to the configuration keys:
network.automatic-ntlm-auth.trusted-uris
network.negotiate-auth.delegation-uris
network.negotiate-auth.trusted-uris
in the form site1.com,site2.com, etc. with no effect.
Starting FireFox in safe mode (no extensions, no plugins) made no different.

Cor-el,
Thanks. This made sense and was easy to correct (after voiding the warrant)y and fixed the problem.
One addition to the article. You can use only the domain "xxx.com" portion of the server name in the list to match every server that ends with that name. Careful, using only "com" would open the world. This works great since my company uses hundreds of web servers, but only a few domains with a naming standard.
I would have put this in the article posts ... but the list is already so long its tough to read through every one.
Regards,
Mocktwo

Similar Messages

Intranet Authentication Prompts

I am on a company domain. With IE my NT credentials (workstation logon credentials) are used for all Intranet web sites (within the local domain), so there are no authentication prompts. With Firefox I get hundreds of authentication prompts for these same web servers.
I did not copy settings from IE when I installed Firefox, as I wanted to start fresh and use a Firefox approach.
What setting am I missing in Firefox?

Cor-el,
Thanks. This made sense and was easy to correct (after voiding the warrant)y and fixed the problem.
One addition to the article. You can use only the domain "xxx.com" portion of the server name in the list to match every server that ends with that name. Careful, using only "com" would open the world. This works great since my company uses hundreds of web servers, but only a few domains with a naming standard.
I would have put this in the article posts ... but the list is already so long its tough to read through every one.
Regards,
Mocktwo

Authentication prompt issue when opening an office file in a document library with read permission for domain users

An user as part of the domain users tries to open an office file from a document library but he got an authentication prompt asking him to authenticate. Domain users has only access to this library and not to the whole site. This uses to work in SharePoint
2007 without any problem but not in SharePoint 2013, we didn't have a workflow on SP2007.
Domain users has read access to only this document library in the site, but he shouldn't get an authentication prompt since he is part of the domain users and he is not trying to modify the document, he can open the document but gets two prompts, he can't
also see the list using explorer view since nothings appears using the explorer view.
Now, when opening the file, we can see..Updating Workflow Status, but we don't have any workflow working on this site or library, event any feature related to workflow.
If we go to the event viewer in the server, we find this information,
I also checked this thread but I couldn't find this scenario.
https://social.technet.microsoft.com/Forums/sharepoint/en-US/91bc770b-bb70-4885-a4ad-a243edb88753/event-id-8026-workflow-soap-getworkflowdataforitem-failed-doc-library-no-workflow?forum=sharepointgeneralprevious
I also created another list with the same permissions and using other office files but got the same behavior.
Now, we have migrated this site from SP2007 to SP2013.
Any ideas?

OK, I am going to throw out a lot of ideas here so hopefully they get you closer to a diagnosis. Hang on :)
Does it happen to work for some users but not others? If so, try logging in on the "good" computer with the "bad" username. This will tell you if the problem is related to the end-user's system. Also, once the user downloads a document
successfully can they open and work on it in Word? Also, does the document library have any custom content types associated with it or does it just use 'Document'?
I notice that there are other folks on the web that have run into this same problem and the similarity seems to be that they are either on SharePoint 2007 or have upgraded from 2007. Did this doc library start out as a 2007 library?
What you might want to do is this: Make a site collection from scratch in 2013 (or find one that you know was created in 2013). Choose team site (or whatever you want) for the root web and set up the security the same way you have it on the malfunctioning
library. Now, use windows explorer to copy and paste some of the documents to the new location. Be sure you recreate any needed content types. Now test it from the troubled user's computer.
I'm thinking there may be something that is different about the library since it was migrated through various versions and updates since 2007. I've sometimes found that there can be problems (especially with user profiles but that's a different story) with
things that go through this evolution.

Unable to open documents in Office (Word and Excel) - 3 authentication prompts followed by 'Could not open ...'

I am getting multiple authentication prompts when I try to open or create a new .docx or .xslx document from SharePoint 2010.
I tried this on different machines and on different browsers (IE and Firefox) and see the same behavior. I am the site collection administrator. I see the same behavior on other sites also. Other users are also seeing the same behavior.
If I download the document, I can open it without any issues.
The Web Application IIS authentication settings is NTLM and Client Integration is enabled.

Hi shankze,
According to your description, my understanding is that you could not open the documents because of the authentications.
Go to IIS, make sure that the Security TokenServiceApplication pool is started.
Please do as the followings, and compare the result:
Add your site to the Trusted Sites Internet Zone.
Go to Internet Options - Security - Highlight the Trusted Sites Check Mark - click on custom level - scroll to the bottom and in the user authentication section select "Automatic logon with current username and password."
Also, you can do via group policy in DC server.
More information, please refer to the link:
http://www.networkadminsecrets.com/2011/08/sharepoint-2010-authentication-prompts.html
I hope this helps.
Thanks,
Wendy
Wendy Li
TechNet Community Support

Outlook Authentication Prompts

Having a lot of problems with Outlook 2010/2013 authentication prompts. Client is migrating from EX 2010 and going to onsite EX 2013. Both Outlook 2010 & 2013 get the prompts. At this point in the migration, all internal DNS records point to the load
balancer which goes to the 2013 DAG environment. I have verified the Outlook Anywhere settings on 2013 about 100 times.
External Host Name and Internal Host Name are identical: mail.company.com
External/Internal ClientAuthenticationMethods NTLM
IISAuthenticationMethods {Basic, NTLM, Negotiate}
Require SSL is true for both External/Internal
I have tried many things already, but I am still getting prompted. However, when I modify the local Hosts file to point to Exchange 2010 directly (for those users who are still on 2010), I get no prompts at all.
I have also tried pointing the hosts file to the 2013 servers directly, bypassing the load balancer and the prompts still happen. So, it is not the load balancer.
Thoughts?
MCITP Exchange 2010 | MCITP Lync Server 2010 | MCTS Windows 2008

Hello,
What’s the server name on the credential window? Is it the CAS server or MBX server?
How about manually canceled credential windows, can you still use Outlook to send/receive emails properly?
If the authentication failed when connecting to the CAS server, please check the authentication settings on each VDirs.
If the authentication failed when connecting to the MBX server, please check if the public folder migrated properly.
Thanks,
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Simon Wu
TechNet Community Support

Getting Authentication Prompt in SharePoint 2013

Hi,
I am randomly get authentication prompts in SharePoint 2013 when performing a search. Please assist me what is causing this and how to resolve .
I am using IE -8(32 bit).
Please guide me on this.
Thanks in advance

Hi,
Try below URL they might help you
http://www.sharepointdiary.com/2012/04/sharepoint-keeps-asking-for-password.html
http://blogs.c5insight.com/Home/tabid/40/entryid/245/Tips-to-Avoid-Login-Prompts-in-SharePoint.aspx
Regards
PT

Outlook 2010 Authentication prompt

I have OUTLOOK 2010 connecting to Exchange 2010 (fully patched/etc. with proper CAS array settings/etc.).
We are seeing Password Authentication prompts from Outlook clients as they transition between a LAN connection to a Wireless connection. I have always attributed this to the client moving from MAPI mode to "Outlook Anywhere" mode, which in "Outlook
Anywhere" mode we have BASIC authentication enabled, so a prompt is expected (offsite is the concept).
HOWEVER since the workstation is moving from a LAN connection to a WIRELESS internal connection and the CAS array is available, WHY would I be seeing this prompt? My expectation is the workstation would stay in MAPI connectivity mode as it transitions from
the LAN connection to the wireless connection and no prompt would be expected?? Is it a "timing" issue?
THANKS

For us, the changes made in IIS are permanent, there quite possibly is a powershell way of doing it but I am still getting to grips with PS myself so I don't know.
I wont plagiarise others work but these two links here give a good explanation between Basic and NTLM. personally, I have always used basic because I always seem to get problems with NTLM, though one time it did work as expected but I forgot what I did to
get it working now.
https://social.technet.microsoft.com/Forums/exchange/en-US/92178beb-3310-4363-8848-d022a6e2a77f/basic-vs-ntlm-authentication-outlook-anywhere
http://www.sysadminlab.net/exchange/outlook-anywhere-basic-vs-ntlm-authentication-explained

Safari continuous authentication prompt and video streaming issue

Hi All,
I have a user who is using Mac machines and reported that he is
not able to login into SharePoint 2013 production site and wants to upload
.mp4 media files. There are other users who are using iPad.
While logging using Safari browser and enter he his credentials, SharePoint authentication prompt continuously and freezes. After the video play icon is shown but video is not shown.
But using Chrome Browser he can login with only 1 authentication prompt, able to upload .mp4 files and able to stream the video as shown below:
SharePoint authentication is NTLM and chrome works perfectly fine for the user. But other users cannot view on Safari browser at all.
I did my initial research and discovered that SharePoint 2013 does not support Safari as links below:
https://social.technet.microsoft.com/Forums/en-US/e3d42a62-1ba9-4c69-97fc-d357d01bd486/sharepoint-2013-is-not-compatible-with-ios-8?forum=sharepointgeneral
https://social.technet.microsoft.com/Forums/en-US/6ef10633-0b01-4572-8f27-5395463d3895/safari-multiple-login-prompts (Microsoft reply)
• Does SharePoint 2013 not support Safari browser out the box? http://blog.christian-heindel.de/2013/01/17/office-for-mac-2011-and-sharepoint-2013/
• Why user can still able to login using Chrome on Mac machines and not Safari which should be default browser MAC machine?
Any help would be greatly appreciated.
Thanks in advance.
Cheers,
--Aaroh
Aroh Shukla

Thanks Baba and others,
Before your reply with a MAC user and he was using Safari v.7.1.2.
I also received from some users about different browser Safari versions.
Safari with: v6.x on OS X 10.8, v7.x on OS X v10.9
NOT working for users (watching .mp4 videos on SharePoint)
Safari with: v8.0 on OS X 10.10,Chrome v40.x WORKING
for users. (watching .mp4 videos on SharePoint)
Does SharePoint 2013 supports older safari versions like Safari v6.x, v7.x on OS X 10.8 and OS X 10.9.
I can test with users only next week as its holiday seasons here in Singapore.
Thanks for your help.
Cheers,
--aaroh
Aroh Shukla

Authentication prompt during installation

Hi,
after the Upgrade to SCCM 2012 SP1 CU3 to SCCM 2012 R2 the Boot Image dosen t work.
I have tried this:
Installed CU 4 that shot resolved this problem and create a new Boot Image (MDT).
Now i have the problem that during the Installation there is a authentication prompt and i have now idea why.
smts.log
Do you now why this prompt appear?
Regards,
Tobias

In the smsts.log it is not transparent which user tries to authenticate or save the logs in this share, where can I find this information?
Yes it is, I've already given you the answer to this above and it's the same for everything that happens in any task sequence: "using the local system account or the network access account".
Can you please post the entire, unedited and relevant snippet from the smsts.log where the error is occurring?
Jason | http://blog.configmgrftw.com | @jasonsandys

Authentication Prompt on Mobile Devices

On my public facing SharePoint 2013 site, I have anonymous authentication enabled, however mobile devices are prompted to authenticate credentials when they visit the site.
All non-mobile devices the site without receiving the authentication prompt, regardless of the browser it uses. Mobile Browser view is deactivated.
I did trace the connection through Fiddler and it looks as though I am getting 3 401 errors when the mobile browser tries to load the page. These errors are triggered when the browser tries to access a css and 2 js files. When I traced the connection
from a pc, I received 404 not found errors when the browser tries to access these files. I'm trying to find where those files are located at, to check to see if they are there or if permissions to that folder/files is the issue, but am still trying to get
an understanding of where the files are stored (I'm still a SharePoint newbie). Based on the info from Fiddler, they are stored at /ui/1.10.4/jquery-ui.js HTTP/1.1, however I don't see that folder in the site contents and structure when I search the site settings
of the SharePoint page.
Lastly, mobile devices had been able to access the page fine for several months, however several server updates and patches were applied to our SharePoint environment recently, which coincided with this issue starting.
Thank you for any insight you might be able to give!

Hi,
According to your description, it continues to prompt for authentication When Windows users tries to connect from mobile devices.
For your issue:
Close all instances of your browser, restart your browser.
If you use apple products with ios8. The problem is Safari.
It works fine under ios8 when using Chrome.
You can change windows authentication to basic authentication.
For more information about Troubleshooting HTTP 401 errors in IIS, refer to the article:
http://msdynamicswiki.com/2014/04/24/troubleshooting-http-401-errors-in-iis/
Besides, here is a similar post, you can have a look at:
https://social.technet.microsoft.com/Forums/en-US/34895295-452b-4a89-b59f-6791e485edb2/user-authentication-in-mobile-access?forum=Forefrontedgegeneral
Best Regards,
Lisa Chen
Lisa Chen
TechNet Community Support

Disk Utility - why all the authentication prompts?

I tried this question on Usenet first but did not have much response...
I have been experiencing this behaviour with running Disk Utility in a non-admin account. It seems that it is asking me to authenticate as an admin user when it shouldn't be.
Examples:
1) Using DU to unmount or eject either or both partitions on a FW drive prompts me to enter an admin username/password, but I can eject the volumes with Finder with no such prompt
2) After one of the updates (maybe 10.4.5 or 10.4.6, can't remember for sure) I started getting two authentication prompts when repairing permissions. One is expected; but why two?
3) I get prompted to authenticate when erasing a CD-RW. When I reported this to Apple as a bug I got this response: "Please know that our engineers have not been able to reproduce this reported behavior with a non-admin user. For the non-admin user no login prompt was given and cdrw erased with no issues."
4) Entering this into Terminal results in a GUI authentication prompt popping up:
diskutil unmount /Volumes/partition1
But I can run this applescript and it works with no authentication:
do shell script "diskutil unmount \"/Volumes/partition1\""
Is ANY of this happening to anyone else? What's wrong with my system?
eMac Mac OS X (10.4.8)

Never mind, I fixed it myself. I fired up OnyX and let it have a go on my boot drive. I let it delete caches, rebuild this and that, pretty much let it do everything it could do. After a reboot now all is okay!

Multiple proxy authentication prompts

When some particular sites are visited, multiple proxy authentication prompts are received. After canceling these pop-up windows the page can be finalized visited, we have observed that this issue is happening when Adobe Flash player is involved.
This has been an intermittent issue over the last months, however there is a site that can be used to reproduce the problem.
http://tv.adobe.com/watch/accessibility-adobe/preparing-indesign-files-for-accessibility/
Google chrome and IE are not affected

Hi Tylerdowner,
Thanks for your response. I should have mentioned two things, I am already using a recent firefox version (16.0.1) and these authentication prompts are for proxy user and password, these are not related with digital certificates as suggested in the first answer provided.
The problem that we are experiencing it is pretty similar to a well-known behaviour experienced in previous firefox versions. This can be replicated as follow:
0) Start firefox .
1) Open several sites in different tabs.
2) Close firefox selecting "Save and quit"
3) Start firefox again. Multiple authentication prompts (user and password) will be required.
Our current situation is pretty similar but it is happening when some sites with adobe flash player content is visited. For instance when this site is visited [[link text|http://tv.adobe.com/watch/accessibility-adobe/preparing-indesign-files-for-accessibility/ ]] multiple authentication prompts are poped-up
It seems to me (speculating) that adobe flash plugin may be sending a burst of hits through the proxy, as none of them has been previously authenticated, one username/password request is being sent to the browser one for each "hit" that was simultaneously sent through the proxy.
Thanks for your feedback.

Kerberos authentication prompting for credentials in Sharepoint 2013

Hello all,
I think I’m a bit confused on what I should expect out of Kerberos and sharepoint.
Following the steps located in
http://blog.blksthl.com/2012/09/26/the-first-kerberos-guide-for-sharepoint-2013-technicians/ , I’ve setup Kerberos in my Sharepoint 2013 environment. My hope was that configuring kerberos authentication would solve the issue of users being prompted for
credentials when they access sharepoint. I know that one way to address this problem is to tweak the IE settings by adding the site to the local intranet or trusted zones, but am I wrong in thinking that Kerberos should also authenticate the user on to the
site? Here’s my situation:
Previously, I had our sharepoint URL in the trusted zone and had IE set to pass my credentials through, and that worked. After configuring Kerberos, I can see the tickets on my system using klist and the security log on our web front-end shows that I authenticated
using Kerberos.
However, if I then remove the sharepoint URL from the trusted zone in IE, I still get prompted for credentials. If I cancel the credential prompt, I get a 401 error and the security log on the server shows a NTLM login attempt.
As soon as I put the URL back in the trusted zone, I can access the site and the server log shows a Kerberos authentication.
I’m I wrong in thinking that if Kerberos was working properly then I shouldn't need to have the URL in the trusted zone?
Thanks
Bill

Thanks for the quick reply, Alex. At least it’s good to know it appears to be working as designed.
Thanks again,
Bill

Why does Proxy Authentication prompt for user/pass on Win7 but not XP?

Trying to use NTLM authentication for our proxy through Firefox 7.0.1. It works great in Windows XP - the user doesn't ever get prompted for his username or password when going to the internet. However, when using the same settings with Windows 7 machines going to the same internet sites, they always get prompted for username and password. Is there a workaround for this? Is this a bug?

Start Firefox in <u>[[Safe Mode|Safe Mode]]</u> to check if one of the extensions (Firefox/Tools > Add-ons > Extensions) or if hardware acceleration is causing the problem.
*Switch to the DEFAULT theme: Firefox/Tools > Add-ons > Appearance
*Do NOT click the Reset button on the Safe Mode start window
*https://support.mozilla.org/kb/Safe+Mode
*https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes

Outlook Authentication prompt after migrating from 2007/2013

I have a very simple environment. 3 new Exchange 2013 servers in a DAG behind a load balancer. Most users are still on Exchange 2007 environment. Autodiscover has been configured for load balanced name. There is no External Outlook
Anywhere connectivity. I have NOT enabled Outlook Anywhere in the 2007 environment. I have a simple Lync 2013 environment. 1 Server in a standard pool with no external connectivity. I have integration with OWA 2013 and Lync working.
All versions of Outlook are at least on the patch level required for Exchange 2013.
My issue is random password prompts in Outlook for some (not all) users with mailboxes on Exchange 2013. This password prompt appears to be coming from the load balanced Outlook anywhere name. I have had a few reports of users on Exchange 2007
getting an error stating they cannot open default set of folders. If I have them exit Lync 2013 client and open Outlook again it works fine. They can then open Lync without issue. Closing and opening Outlook will no longer reproduce the issue.
It seems like Lync is causing an issue here somewhere, but I have no idea where.
Lync BPA completes without any warning or errors. All test cmdlets complete without any errors.
2013 Outlook Anywhere settings:
Name                               : Rpc (Default Web Site)
ExternalHostname                   :
InternalHostname                   : mail.company.com
ExternalClientAuthenticationMethod : Ntlm
InternalClientAuthenticationMethod : Ntlm
IISAuthenticationMethods           : {Basic, Ntlm, Negotiate}
Get-AutodiscoverVirtualDirectory|select *auth*
InternalAuthenticationMethods : {Basic, Ntlm, WindowsIntegrated, WSSecurity, OAuth}
ExternalAuthenticationMethods : {Basic, Ntlm, WindowsIntegrated, WSSecurity, OAuth}
LiveIdNegotiateAuthentication : False
WSSecurityAuthentication      : True
LiveIdBasicAuthentication     : False
BasicAuthentication           : True
DigestAuthentication          : False
WindowsAuthentication         : True
OAuthAuthentication           : True
AdfsAuthentication            : False
brian smith

I just could not let this go last night. The issue was occurring when I moved a mailbox to 2013.
2 scenarios
#1. Users mailbox moved from 2007 to 2013. Profile has a secondary mailbox that is still on 2007. When entering Outlook they are prompted for
a password into the internally resolvable load balanced name (mail.company.com). If I remove this secondary 2007 mailbox they work fine, UNTIL they try to access anything on 2007 (calendar, Public Folder, another mailbox, etc). When they do attempt they
are prompted for a password.
I have seemingly fixed this error by adding the external URL back to AutoDiscover on 2013 based on
http://support.microsoft.com/kb/2839517<u5:p></u5:p>. Even though we have no intentions of using Outlook Anywhere externally.
During this troubleshooting I also changed InternalClientsRequireSsl from false to true. Now I have clients reporting errors in their event log “A fatal error occurred while
creating an SSL client credential. The internal error state is 10013." I do not think changing this to require SSL, but I’m almost scared to change it because this issue
is seemingly resolved.
#2 mailbox that is only accessed as a shared mailbox Mailbox is moved from 2007 to 2013. Users attaching to the mailbox are still on 2007. This works perfectly fine for some. However others receive a password prompt each time they open Outlook.
If the 2013 mailbox is removed from their outlook profile they receive no prompt. If I manually remove the mailbox from their profile and add it back the prompts go away. I have not been tracking client versions, but these last 4 are running 12.0.6691.5000.
I also noticed in checking the connection status all 2007 references are using [Nego] for authentication and mail.company.com is using NTLM. Is this normal? This is the same in my test environment, but I can’t replicate this issue in my test environment
either.
I’m very stumped.
2013 Outlook anywhere config:
ExternalClientAuthenticationMethod : Ntlm
InternalClientAuthenticationMethod : Ntlm
IISAuthenticationMethods           : {Basic, Ntlm, Negotiate}
SSLOffloading                      : True
ExternalClientsRequireSsl          : True
InternalClientsRequireSsl          : True
2007 Outlook anywhere config:
ExternalClientAuthenticationMethod : Ntlm
InternalClientAuthenticationMethod : Ntlm
IISAuthenticationMethods           : {Basic, Ntlm}
SSLOffloading                      : True
ExternalClientsRequireSsl          : True
InternalClientsRequireSsl          : False
brian smith

Repeated Intranet authentication prompts

Similar Messages

Maybe you are looking for