Going through the IIS errors on the DPs I've noticed that for each file that gets downloaded from the DP there's 2 lines on the IIS log:

 

2011-10-06 13:45:17 111.111.111.111 HEAD /SMS_DP_SMSPKGD$/XXX00278/disk1/stage/Components/oracle.designer.repman61/10.1.2.0.2/1/DataFiles/ldll.jar - 80 - 222.222.222.222 Microsoft+BITS/7.5 401 2 5 0

2011-10-06 13:45:17 111.111.111.111 HEAD /SMS_DP_SMSPKGD$/XXX00278/disk1/stage/Components/oracle.designer.repman61/10.1.2.0.2/1/DataFiles/ldll.jar - 80 DOMAIN\USERNAME 222.222.222.222 Microsoft+BITS/7.5 200 0 0 0

 

As you can see from above, the first is an anonymous authentication which fails with authentication failed - because we are not authorizing anonymous authentications.

The second succeeds because it uses credentials of a domain user, which we obviously allow.

 

As mentioned above, this happens for every single file that is downloaded.

I've looked at this page: http://blogs.technet.com/b/configurationmgr/archive/2010/06/03/solution-you-may-experience-slow-performance-when-using-bits-and-kerberos-authentication-on-configmgr-2007-distribution-points.aspx but even with the changes mentioned there the same thing happens.

At the moment we are using negotiate as the preferred authentication method with NTLM as second.

I've also tried to set authPersistSingleRequest to true as mentioned here: http://msdn.microsoft.com/en-us/library/aa347472.aspx but again nothing changes.

What do I need to do to make the second requests go away (short of enabling anonymous authentication).

 

Have you changed IIS settings as mentioned in the below blog post?

http://myitforum.com/cs2/blogs/cnackers/archive/2010/09/20/configuration-manager-configuring-server-2008-r2-for-site-systems.aspx

In the WebDAV Settings page, for Property Behavior, set Allow anonymous property queries to True

An00p: yes, all of the settings are as described on the website above. In SCCM the DPs are not set to "Allow clients to connect anonymously (Required for mobile device clients)".

I've tried enabling that and it fixes the problem (as expected) by always requesting things from the DPs anonymously. However, as I mentioned above, this is something I was hoping I wouldn't have to do.

• Proposed as answer by Anoop C Nair Friday, October 07, 2011 9:37 AM
• Unproposed as answer by cogumel0 Saturday, October 08, 2011 7:31 AM

Yes, I know this is an old post, but Im trying to clean them up.

Did you solve this problem, if so what was the solution?

Since no one has answer this post, I recommend opening  a support case with CSS as they can work with you to solve this problem.