SharePoint prompts for Credentials

Hello,
Users are experiencing pop-up message prompting credentials when they use SharePoint 2010 . Users who use the Windows Explorer view often get the most prompts, but everybody is getting prompted for their username/password. Some get prompted more
than others. Others may not see a prompt for a few days or a week or so, but others will see it nearly every day. Users enter their username and password, but will be prompted later on in the day.
The site is trusted in IE in the intranet zone
Automatic logon only in Intranet Zone
Users using IE 10/11
Clients are using Window 8/7
Web Client service is running on the client desktop
Desktop Experience is enabled
SharePoint is using NTLM
Users are using the FQDN to reach sites, like
http://sharepoint.domain.com
Could be a problem with NTLM? Could there be a problem with DNS? Are security certificates being lost? Is the SharePoint server losing connection with a domain controller? Where can event logs be found to track who is being prompted and when
authentication is lost with a user's session? On the SharePoint server, entries for this event are not being created in Windows application event logs and SharePoint logs. Any suggestions would be great.
Paul

Cleraly the authentication information isn't coming through to the Server automatically. The normal cause of this you've already addressed, the Trusted/Intranet zone and automatic credential passing. The second most likely cause is the same but there's an
error in your configuration, check it from the basics once more (fiddling with the settings in there).
You can have issues if you've set the SharePoint site up as a C record instead of an A Host entry in DNS but i've only seen that with Kerberos and it had quite different symptoms.
Certificates are always a potential problem but it's not the first place i'd look. Check the windows security logs on the WFE server to see what authentication is happening on the server when your users connect.
To eliminate DNS as a cause try connecting to the server using an entry in a client computers host file.

Similar Messages

Getting Prompt for Credentials When Opening InfoPath 2010 Form in Sharepoint 2010

I have a domain user who runs Office 2010 x32 and uses a Sharepoint 2010 site daily. Lately a specific page on that site has been randomly giving prompts for credentials when opening existing documents and creating new ones. The process can be most easily
replicated by opening the new document template in Infopath by going to Documents -> New in the ribbon bar of the SP page. Most of the time the Windows credentials for the user are passed to Infopath/Sharepoint automatically (which is normal), but on the
fourth or fifth attempt to create a new form, the prompt appears. The user can still enter the credentials and open the blank template form, but a prompt should not appear. The user is also the administrator for that page, so I'm thinking it's not a permissions
issue.
The user is running IE 9 on Windows 7 Pro x64. I have performed the following:
Reset advanced IE settings and all user cache data
Cleared cached Sharepoint credentials in Windows credential manager
Re-applied group policy for the machine using gpupdate /force
Logged in with a clean temporary profile
Logged in to another domain account using the user's Sharepoint credentials
Cleared Infopath cache
Re-installed Office 2010 x32
The problem only occurs only on this particular machine. There are no Sharepoint or authentication-related errors or warnings in the application and system event logs. There are also no error messages on-screen when the prompt appears. I also considered
the possibility of this being a performance related issue in the case that maybe Infopath was taking too long to start, causing the credential pass-through process to time out and fall back to a prompt. I ran disk cleanup, deleted some temporary files, and
checked for excessive CPU/memory load. I didn't find any issues and doing these things did not help.
I'm convinced there is another setting somewhere in Windows that is causing this. Interestingly it always happens after four or five attempts, never the first time. Can someone point me in the right direction?

Hi Titan, this sounds like an IE security setting issue. Things to do:
1. In Internet options>Security>Local Intranet, make sure "Enable Protected Mode" is not selected.
2. Under Sites>Advanced, add https://*.sharepoint.com (and make sure "Require server verification..." is not checked).
3. Under Security>Custom Level, scroll all the way to the bottom and make sure "Automatic logon with current user..." is checked.
cameron rautmann

Kerberos authentication prompting for credentials in Sharepoint 2013

Hello all,
I think I’m a bit confused on what I should expect out of Kerberos and sharepoint.
Following the steps located in
http://blog.blksthl.com/2012/09/26/the-first-kerberos-guide-for-sharepoint-2013-technicians/ , I’ve setup Kerberos in my Sharepoint 2013 environment. My hope was that configuring kerberos authentication would solve the issue of users being prompted for
credentials when they access sharepoint. I know that one way to address this problem is to tweak the IE settings by adding the site to the local intranet or trusted zones, but am I wrong in thinking that Kerberos should also authenticate the user on to the
site? Here’s my situation:
Previously, I had our sharepoint URL in the trusted zone and had IE set to pass my credentials through, and that worked. After configuring Kerberos, I can see the tickets on my system using klist and the security log on our web front-end shows that I authenticated
using Kerberos.
However, if I then remove the sharepoint URL from the trusted zone in IE, I still get prompted for credentials. If I cancel the credential prompt, I get a 401 error and the security log on the server shows a NTLM login attempt.
As soon as I put the URL back in the trusted zone, I can access the site and the server log shows a Kerberos authentication.
I’m I wrong in thinking that if Kerberos was working properly then I shouldn't need to have the URL in the trusted zone?
Thanks
Bill

Thanks for the quick reply, Alex. At least it’s good to know it appears to be working as designed.
Thanks again,
Bill

ABAP consuming Web Service in HTTPS keeps prompting for credentials

I have a Share Point Web Service that I want
to call in HTTPS from ABAP
in an ECC 6.0 SAP_BASIS 700 SP 30 system. The
following steps have been
executed:
BASIS work completed –
SAPCRYPTOLIB, HTTPS Activation, profile
parameters, STRUST certificates
I have created the Client Proxy in SE80 for the SharePoint WCF Web Service
The Logical Port was created in SOAMANAGER
The issue I have is when I test the process using SE80 sometimes it will prompt
for credentials, sometimes it won't. The behavior is very sporadic, I
can run it once and it prompts then the second time it doesn't. This is
especially true after a restart of the system. The user and password
are on the RFC destination under consumer security tab.
Any suggestions why the prompting for
credentials?
Regards
Diane Szmurlo

Hi Sekhar,
Please see below link. It will be helpful.
Regards,
Sudha

Office Web App Prompting For Credentials Externally Only

We deployed an office web app server and it works great internally, but whenever we try to access documents externally, we are prompted for credentials. Even if we put our credentials in, we always get a 401 forbidden error. Also note that
we can access the hosting/discovery page fine internally, but not externally. Any help is appreciated.

Hi,
According to your description, I think this issue is more related to SharePoint, I suggest that you could post it to
SharePoint forum.
Regards
Starain
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

SharePoint prompting for password when saving word document

Saving a word document back to SharePoint always prompts for credentials.
I am the administrator for a SharePoint farm. We have enabled kerberos, and added the portal to the intranet zone in Internet Explorer by group policy. Most of the time this limits the amount of password prompts our customers see (including viewing the portal
in a browser, and opening documents); however, we are still getting the prompt for credentials when trying to save a word document back to SharePoint.
Here are some details: - SharePoint 2010 - Word 2010 - Kerberos enabled - Portal added to intranet zone in IE - Checkbox for passing automatic credentials enabled
Can anyone help? Is there something I've missed? Is this prompt just unavoidable?

Hi,
Internet Explorer uses the Web Client service when you use Internet Explorer to access a
WebDAV resource. The Web Client Service uses Windows HTTP Services (WinHTTP) to perform the network I/O to the remote host. WinHTTP sends user credentials only in response to requests that occur on a local intranet site.
However, WinHTTP does not check the security zone
settings in Internet Explorer to determine whether a Web site is in a zone that lets credentials be sent automatically.
Click Start, type regedit in the Start Search box, and then press
ENTER.
Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WebClient\Parameters
On the Edit menu, point to New, and then click
Multi-String Value.
Type AuthForwardServerList, and then press ENTER.
On the Edit menu, click Modify.
In the Value data box, type the URL of the server that hosts the Web share, and then click
OK.
Note You can also type a list of URLs in the
Value data box. For more information, see the "Sample URL list" section in this article.
Exit Registry Editor.
After this registry entry is created, the WebClient service will read the entry value. If the client computer tries to access a URL that matches any of the expressions in the list, the user credential will be sent successfully to authenticate
the user, even if no proxy is configured.
Note You have to restart the WebClient service after you modify the registry.
Reference: http://support.microsoft.com/kb/943280?wa=wsignin1.0
-Ivan
Ivan Sanders My LinkedIn Profile,
My Blog,
@iasanders.

Multiple Prompts for Credentials

I know there are multiple posts about this and I have tried all fixes with no luck.
When users go to sharepoint they are prompted for credentials 3 times. If they enter their credentials they are able to hit the site fine. If they hit cancel all 3 times they still get to the site.
Now here is the weirdest part. If a user hits one of the WFE's directly they are not prompted for credentials. They can immediately try to go to the main address for SP and they get prompted. Out layout is below.
I am at wits end on this and pulling my hair out. Nothing I try has worked. Any and all help is appreciated.
SP Layout
https://ozone.osumc.net - Main URL
Servers: OZONE-SEARCH OZONE-2 OZONE-3 OZONE-4 OZONE-SQL
This all worked fine with no issues as of last week. Over the weekend this started happening. No windows updates have been applied.

It sounds like you have servers behind a load balancer? Could be that one server lost its trust with Active Directory, or that it's Kerberos token expired and didn't renew for whatever reason.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

STSNavigate() still prompting for credentials when trying to open a document

Here is my scenario. We have setup a public facing site the utilizes a Web Application that searches a internal SharePoint 2010 site. The web app utilizes the SharePoint QueryService to search the site. We provide credentials to the service as the SharePoint
site is not an anonymous site (although if the QueryService worked with the site being anonymous that would satisfy our requirements). The Web server allows anonymous access to the web app through IIS. I have found that utilizing the STSNavigate() function
SUPPOSED to allow the document to be downloaded or opened without prompting for credentials. I modified my search results link to include the function on click and low and behold it still prompts for credentials the same way it would if the url just had the
link to the file. I am on a time clock here and I am running to the end of my rope. Any suggestions?

Hi,
According to your post, my understanding is that STSNavigate() still prompt for credentials when trying to open a document.
Per my knowledge, if you try to open an Office file directly from a remote place, Office wants to know who the hell you are. If the server responses with the
Microsoft Office Protocol Discovery or a
FrontPage Protocol or a
WebDav Protocol
Then it ask you for credentials.
As a workaround, I recommend to “init.js” located in \Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\TEMPLATE\LAYOUTS\1033 folder.
You need to add this it:
STSNavigate(ctx.HttpRoot + "/_layouts/download.aspx?SourceUrl=" + o);return false;
For more information, you can refer to:
SharePoint login prompt when accessing files in a Document Library Solution
Best Regards,
Linda Li
Linda Li
TechNet Community Support

Shared folders (Windows file shares) show access denied and do not prompt for credentials

Scenario:
Like other admins, I log on and work as a 'standard user' (usera) with no admin rights anywhere in the domain, to perform admin tasks I have another account (userb) which I authenticate with as and when required. userb has been allocated/delegated permissions
as required.
Problem:
When trying to connect to shared folders on servers (2008 R2) using a UNC patch via Windows Explorer (Win 7 Ent.), I see an access denied error and do not get an option to supply alternative credentials.
If I try to connect to the admin shares on the same server (\\server\C$ or \\server\e$) I get an access denied message AND get prompted for credentials. I supply my admin account and gain access as expected.
If I check share and storage management when attempting to connect, I see that Windows is trying to connect me to each share as usera (which has no access). I understand why I get access denied at this point, but not why it can't just prompt me to supply an
account that does have access. When trying the admin shares I also see the usera account, but I get a prompt to supply a user who does have access.
Share permissions on the folders are for example 'Everyone' Full Control. NTFS permissions are 'userb' has modify (read, execute, list, traverse etc) via a 'Server Admins' AD Universal security group.
Note: If I do a NET USE from CMD and use the /USER switch, I can access the shares fine. But this is not great for accessing shared folders on the fly from various computers.
How can I get the other shares on the server to prompt me, rather than just say access denied?
Many thanks.

Try to disable guest user from the server
If you found this post helpful, please give it a "Helpful" vote. If it answered your question, remember to mark it as an "Answer". This posting is provided "AS IS" with no warranties and confers no rights! Always test ANY
suggestion in a test environment before implementing!

SQLServer Reporting Services 2005 Prompts for Credentials for a trusted domain user

Currently the report is running in the domain AAA. Users in the domain AAA are using the report.
Another new domain BBB and an user XXX is now created and BBB\XXX has been given Browser access. Domain AAA and BBB are trusted domains.
After this when the user BBB\XXX logs in and access the report, before loading the report, credentials dialog is prompted, once credentials of BBB\XXX is entered, the report is loaded.
Why the report prompts for this additional credential dialog for the trusted domain user?

Hello,
Did you have get two textboxes in the report parameter panel (in the left side of the "View Report" button)? The issue is occurred when the credential of the datasource is configured with “Prompt for credentials”. Please check if you configured the credential
with "Stored Credential" of the datasource.
Please refer to the following thread to configure the credential.
http://social.msdn.microsoft.com/Forums/sqlserver/en-US/1564cd7a-6b7a-40f1-9f98-5c766ebfc63e/datasource-userid-and-password-being-asked-eachtime-when-report-is-generated?forum=sqlreportingservices
Regards,
Alisa Tang
Alisa Tang
TechNet Community Support

Outlook Anywhere Prompts for Credentials only for Outlook 2010, not Outlook 2013

I'm having a heck of a time with this one. We have Exchange 2010 on premise, with our filtering through EOP. Clients that are using Outlook 2010 Professional Plus are continuously getting prompted for credentials when off network and relying
on Outlook Anywhere.
I've read many threads about configuring credential manager appropriately for the internal domain and our external domain. I can get them to authenticate just fine, and email flows, but they continue to be prompted everytime they connect again.
Here is the kicker: When I install Outlook 2013 on the same computer, outlook anywhere functions just fine, no problems, no authentication prompt.
Like I said I have read a plethera of articles and threads about this, I have gone through all settings on Exchange, our edge server, our firewall, our certificate. The MSSTD string matches our "Issued To" string. NTLM authentication
is configured on both the client and the server. Appropriate settings are configured on the firewalls.
Anyone know why Outlook 2010 would have this problem, but not Outlook 2013 on the same computer, same user, same mailbox database?
Thanks in advance!!!

I'd still Echo Ed's original question.
Do you have Outlook 2010 patched up? At this time you need to be on SP1, and SP2 by October the 14th.
Also I expect you to have a recent update ontop of that as well.
http://blogs.technet.com/b/rmilne/archive/2014/04/14/office-2010-sp2_1320_-do-you-need-to-upgrade_3f00_.aspx
Cheers,
Rhoderick
Microsoft Senior Exchange PFE
Blog:
http://blogs.technet.com/rmilne
Twitter:   LinkedIn:
  Facebook:
  XING:
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

Outlook 2013 Continually Prompting For Credentials

After migrating to Office 365 & installing Pro Plus 2013, Outlook 2013 (32-bit) continues to prompt for credentials even though it shows the mailbox as connected to Exchange.
To stop this prompt, I've done the following:
Removed Outlook credentials from credential manager
Removed/recreated Outlook profiles & renamed "outlook" folder found at C:\User\"username"\AppData\Local\Microsoft\ to "Outlook.old" so Outlook will recreate the folder upon restart.
Checked Security tab of "more settings" of the mailbox to make sure "Always prompt for logon credentials" isn't checked.
Please someone give me guidance as to what else the issue could be.

Hello,
How did you set the Logon network security under More Settings on the Microsoft Exchange
Security tab? Please make sure it's not set to a value other than
Anonymous Authentication.
To verify this, please follow these steps:
1. Launch Control Panel.
2. In Control Panel, locate and click
Mail.
3. Click Show Profiles, select your Outlook profile, and click
Properties.
4. Click E-mail Accounts, select
Account Settings and on the E-mail tab, click Change.
5. In the Change Account dialog, click
More Settings.
6. In the Microsoft Exchange dialog, select the
Security tab.
7. From the Login network security
dropdown, select Anonymous Authentication and click
OK.
8. Click Next and click
Finish, and then click Close on the Account Settings dialog.
9. Click Close on the
Mail Setup dialog, and click OK to close the Mail control panel.
Please let me know the result.
Reagrds,
Steve Fan
Forum Support
Come back and mark the replies as answers if they help and unmark them if they provide no help.
If you have any feedback on our support, please click
here

Windows XP Machines Always Prompt for Credentials (Exchange 2013, Outlook 2010)

I am running Exchange 2013 on Server 2012 Datacenter (VM). Windows 7 clients with Outlook 2010 work fine. Windows XP clients with Outlook 2010 prompt for credentials (user name and password) each time Outlook is started, and checking the "Remember
my password" box does not prevent this from happening the next time. The "Always prompt for logon credentials" checkbox on the "Security" tab of the "More Settings" section of the Exchange account is not checked. I have found a myriad of posts
with similar issues, but they all seem to have to do with SBS/Exchange 2007, and I haven't come across something that works as a solution for me. One suggested certificate issues, and I was having certificate security warnings, but I got that resolved.
I am hopefuly that the fact that this only happens on Windows XP will be telling.

Proxy settings:
auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 50
auth_param ntlm keep_alive on
auth_param basic program /usr/lib/squid3/squid_ldap_auth -R \
-b "DC=domain,DC=local" \
-D "CN=Squid Proxy,OU=TI,OU=Domain,DC=domain,DC=local" \
-W passldap \
-f "sAMAccountName=%s" \
-h domain.local
auth_param basic children 20
auth_param basic realm Domain Internet Proxy
auth_param basic credentialsttl 8 hours
external_acl_type ADS children=50 ipv4 ttl=60 %LOGIN /usr/lib/squid3/squid_ldap_group -S -K -b "DC=domain,DC=local" -f "(&(objectclass=person)(sAMAccountName=%v)(memberof =CN=%a,OU=Domain,DC=domain,DC=local))" -D "CN=Squid Proxy,OU=TI,OU=Domain,DC=domain,DC=local" -s sub -W ldappass domain.local
tks.

WAAS causing extra prompts for credentials

Hi guys,
So when I install the WAAS mobile client onto one of our branch boxes it's causing extra prompts for credentials to pop up every few seconds. I read what I've pasted below already but our branch servers are running DNS and don't use IP's to communicate back to head office.
Has anyone had this issue and how was it fixed.
Thanks,
Brent
CSCsm78019-Cisco WAAS Mobile causes extra prompts for credentials when users access a file server by IP address, or when the CIFS client cannot use Kerberos authentication with the file server. Workaround: Use host names instead of IP addresses

Are you running this on a Vista client? If so perhaps this release note applies:
CSCsy72308-In some deployments, Vista clients may occasionally be prompted for credentials by the domain controller. Workaround: Verify that the domain controller has been excluded from being accelerated.
One solution that would solve it is to simply bypass the the server in WAAS Mobile using the IP Exclusion List. If it is a domain controller it is likely that that is not a file server and therefore is not the primary need of optimization.

Prompted for credentials when running the Recovery Audit Report on MBAM Help Desk web portal

I am prompted for my credentials when I try to run the Recovery Audit Report on MBAM Help Desk web portal. I am a member of the MBAM Read Only Reports group which I specified during the web portal configuration wizard. I would like to suppress
the prompt for credentials.

Add the URL to the Local Intranet sites did not work. The Help desk web portal is on port 8088 and it does not allow you to specify the port when you add the URL to the Local Intranet sites. I am able to access the Reports page from the
Help Desk web portal when I open a browser on the IIS server, but the Reports page does not open without a prompt when I open a browser on a client. Strange.

SharePoint prompts for Credentials

Similar Messages

Maybe you are looking for