I am trying to setup the NLB, I have a load balancer which associate with a URL (test.company.intra) and a virtual IP address, and 2 front end servers. When I tried to access the URL, it just prompts me for credentials. Is there a way for user to go there without that prompt? As it is going to be an intra site, users should be prompt for credentials. Same thing happen when users tried to access the web application within the servers as well. Thanks in advance.

check you have the url in the intranet zone.

The weird thing is we have 3 servers, one applicaiton and 2 front end servers,we can load up the site successfully in the application server without doing anything. So, I wonder if there is any other setting we can configure (e.g IIS) so that we can display the site without requiring the user to login. Thanks in advance. Wanda

Hi Did you add the host header (test.company.intra) to IIS websites on both WFE's? to debug (if you go through your VIP you never know on with one youre logging on) Put xxx.xxx.xxx.xxx (IP WFE #1) test.company.intra in your local HOSTS file, restart IE en try to debug WFE#1 Put xxx.xxx.xxx.xxx (IP WFE #2) test.company.intra in your local HOSTS file, restart IE en try to debug WFE#2 (clear HOSTS file when ready) p.s. Emmanuel meant put http://test.company.intra in the 'Local Intranet Zone' in your browser, IE. Good luck.rob

thanks rob, exactly :) added benefit of the host file is local indexing too. And it prevents a server hop for mysites if you include it in the list ;)

No, unfortunately, that doesn't work. I am still getting the prompt. When I call the site by http://myserver (NO prompt) http://myserverIP (prompt) http://test.company.intra (prompt) In the host file I have already had the IP of the FE server, and test.company.intra

check that http://test.company.intra/ is added in the intranet zone, and the "automatically use my login in the intranet zone" parameter is checked. (on a user computer)

[If you are working from the WFE servers to the local sites] Did you do DisableLoopbackCheck (REG_DWORD) in registry (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa) ? - Did you add te correct host headers to the IIS sites? - Did you enter the correct Alternate Access Mappings in Central Admin? - Do the sites authenticate via NTLM? (not kerberos, if you need Kerberos, do it first under NTLM, and upgrade to Kerberos after its working, NLB with Kerberos is somewhat more complex) These are the things that that are involved, in a clean and correctly installed farm good luck rob

ok, that works. However, we do have another intranet site which is not in "intranet zone", but I can access the site without prompt. Is there any other settings (backend) that does the magic. It might not the best solution as all user has to take this extra step. Thanks in advance.

No, the prompt is by design. You can use a GPO to globally push it to the users, thou.