I have a Sharepoint Services 3.0 site. It is in a domain and the web applicaton authentication is setup as Windows, integrated windows authentication, negotiate (Kerveros). A user initially access the site from a non domain member computer, ie he is on the road. He will initially log in ok. Whenever he attempts to edit a document etc a login screen will pop up. He can select cancel and the document will open and he can edit ok. He then can save it but again the login screen pops up. He selects cancel and then the document gets saved. Need to get rid of what appears to be these needless login screens.

Hi John, Could you please let me know more information about your environment? 1. The WSS 3.0 version number. 2. The Operation System of the server hosts WSS 3.0. 3. The IE version of the affected user. If the OS is Windows Server 2008 or Windows Server 2008 R2 and the user uses IE8 to visit SharePoint sites, it could be a incompatibility issue. Please try to Disable the Kernel Mode Authentication following my blog here: http://lambertqin.spaces.live.com/blog/cns!E93C48B467E6B3E1!1480.entry Let me know if your issue continues to persists. Lambert Qin TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com Sincerely, Lambert Qin Posting is provided "AS IS" with no warranties, and confers no rights.

Hi Lambert, Thanks for responding. The OS is Windows Server 2008 64bit, service pack 2. IE is 8.0.7606.16385. Where do you find the WSS version number?

Hi John, Thanks for your update, your environment matches the conditions which cause the incompatibility issue. Could you please let me know if you have follow the steps in my previous reply? In case you cannot open my blog, you could follow the steps: 1. Find your SharePoint Sites in IIS Manager, double click Authentication. 2. Choose Windows Authentication, click Advanced Settings. 3. In the opening dialogueclear to check Enable Kernel Mode Authentication. 4. Click OK to Save configurationand reset IIS. Let me know if your issue continues to persists. By the way, the WSS 3.0 version could be found at Central Administration > Operations > Servers in Farm. Lambert Qin TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com Sincerely, Lambert Qin Posting is provided "AS IS" with no warranties, and confers no rights.

Hi Lambert, Thanks for the response. I am running version 12.0.0.6421, I followed your steps and cleared the "enabel kernel Mode Authentication" It does seem to be better in that if I edit a .txt file I am no longer asked to authenticate. And if I open a word document I only get asked once to login before the document opens and I can edit it. I am using Office 2010 Beta, I will install the newlty released office and see if that is any improvement. But I am assuming that I shouldn't get any additional login screens once I initailly log in, is this correct?

Hi John, Thanks for letting me know disable Kernel Mode Authentication helps on your issue. Yes, it should be no prompt window for login if using Windows Authentication. Beside installing the Office 2010 RTM, have you tried to use other versions of Office ? such as Office 2007? Lambert Qin TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com Sincerely, Lambert Qin Posting is provided "AS IS" with no warranties, and confers no rights.

Hi Lambert, Yes I tried it on Office 2007 as well late last night and am getting the same response as I described earlier. I am getting a logon screen when I go to edit a Word document. I do not get a logon screen when I open a .txt document. I also get the logon screen when opening an excell document. I click on cancel when the logon screen comes up and it works fine, I can edit the documents and save them.

Hi John, I just used Fiddler to inspect the HTTP traffic when editing a Word and TXT file, I found that the procedure is much more complex when opening a word file. Could you please try to download the Fiddler and inspect the network traffic when opening the document? please let me know which file cause the login window. I opened a workspace for your issue, please you cannot find the file, please upload the fiddler traffic to me for further investigation: Workspace URL: (https://sftasia.one.microsoft.com/ChooseTransfer.aspx?key=b5d8ca12-e02a-41e9-a2ed-23ca38b675bb) Workspace Password: Vqs$%O8FdgQ Lambert Qin TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com Sincerely, Lambert Qin Posting is provided "AS IS" with no warranties, and confers no rights.

Ok, I have uploaded a capture using Fiddler2. I called it login. The 3rd is when the login request came up. It happens just when I click to edit a word document. Let me know if I have sent you what you need. Thanks for your help.

Hi John, Thanks for your cooperation. I checked the trace you uploaded, but I am not sure which is the 3^rd you referred to. Could you please let me know if the 3^rdis the /_vti_bin/shtml.dll/_vti_rpc? I have some questions after reviewing your issue: 1. Did this issue also happen on a computer join the domain? 2. Have you tried to add the site to the Intranet Zone? 3. What is the OS for the client computer? Windows 7 / Vista / XP ? Did the issue happen on all the OS? Lambert Qin TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com Sincerely, Lambert Qin Posting is provided "AS IS" with no warranties, and confers no rights.

Hi Lambert, Sorry for the confusion, the 3rd I reference means teh #3 page listed in the capture, that is when the login screen comes up. The domain is a at a location where in most cases Terminal services are used locally to the sharepoint server. All are members of the domain. The OS is Server 2008, not R2. The sessions on the terminal server also get the same results, ie the login screen appears. For the remote users they are using Windows 7. Yes I have added that site to the trusted sites list in IE8. Let me know if you have any other questions. John Scott

Hi John, If I understand correctly, the 3rd page is the document you edited. I noticed the User-Agent was changed to Microsoft-WebDAV-MiniRedir/6.1.7600 (before that, User-Agent is MSFrontPage/12.0). According to this article, the same issue seems to affect Windows 7 either, the WebDav should be the cause to your issue. “Office 2007 introduced a change such that when installed on Windows Vista machine, it prefers to use WebDAV technology when opening documents from a SharePoint site (previous versions first tried to use the Web Extender Client). Additionally, WebDAV on Windows Vista switched from using WinINet to using WinHTTP because the latter is considered to be more secure. Unfortunately, WinHTTP does not understand zones since it was designed more for services than interactive users. WebDAV implemented a subroutine that would check the user's IE proxy settings and if a proxy was detected (either through the use of "Automatically detect settings" when it successfully retrieved a PAC or configuration script or through the use of specifically defined proxy settings), it would initiate the WinHTTP session with information that would allow the user's credentials to be passed automatically (like WinINet does for Intranet and Trusted zones). The absence of a configured proxy would result in the prompt for credentials (which we agree is undesired and unnecessary in most intranet environments).” Could you please following the resolution in KB943280 and see if it is helpful for you? For your information, the fix is included in Windows 7. To fix the issue, you only need to create the registry item below. Click Start, type regedit in the Start Search box, and then press ENTER. Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WebClient\Parameters On the Edit menu, point to New, and then click Multi-String Value. Type AuthForwardServerList, and then press ENTER. On the Edit menu, click Modify. In the Value data box, type the URL of the server that hosts the Web share, and then click OK. Note You can also type a list of URLs in the Value data box. For more information, see the "Sample URL list" section in this article. Sample URL list The following is a sample URL list: https://*.Contoso.com http://*.dns.live.com *.microsoft.com https://172.169.4.6 This URL list enables the WebClient service to send credentials through the following channels. Exit Registry Editor. Note You have to restart the WebClient service after you modify the registry. More information could be found at KB943280. Lambert Qin TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com Sincerely, Lambert Qin Posting is provided "AS IS" with no warranties, and confers no rights.

Hi Lambert, I have made the changes as provided in your last post. But am still getting the login popup. I also logged in with an XP pro computer with Office 2003 and got the same results, ie a login box appears after I log onto the site and want to open an office document. So I am thinking that is must be something about the Sharepoint site itself. However I also want to setup a couple of other scenarios to see is there is some other combination of OS and Office version that would work like it should, ie no login popup. I will work on this this week. Thanks for you work on this. Do you have any other ideas? I also want to see if Sharepoint 2010 has this issue, I may just upgrade the site. John Scott

Thank you Lambert! I have been fighting this issue as well and your post concerning KB943280 did the trick. Here are my settings: Client: ** Win7, MS Office 2007sp2, IE 8. ** Have my domain "*.mydomain.net" defined in the Local intranet Zone. ** Local internet zone is set for "Automatic logon only in Intranet zone" ** Added the reg key from Lambert's above post with "*.mydomain.net" as the value. Server: ** Win08 sp2, MOSS 2007 sp2, WSS 3.0 sp2 ** Enable Kernel-mode authentication is checked I now see the expected behavior where the user does not receive a login box at all. I was also receiving a login box when opening document libraries in Windows Explorer, and that has been resolved by this fix as well. You may want to check for typos in your client settings John. Tony Bryant

@Tony, Glad to know my posts help you to resolve your issue! @John, Could you please upload a Fiddler trace when using Windows XP and Office 2003 to open the document? I will see if anything more I can help you. Please let me know in which line or which file cause the login prompt. Lambert Qin TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com Sincerely, Lambert Qin Posting is provided "AS IS" with no warranties, and confers no rights.

Whoa, thank you Tony. Your setting "Have my domain "*.mydomain.net" defined in the Local intranet Zone" is what did the trick. I had it in my trusted sites. I have set that to local intranet zone and now am not getting the login popup. Lambert and Tony, thanks for the assist. John Scott

I was not able to login in wss3.0 site . i have hosted that site on server and i was facing that problem on client machine. With above mentioned registry changes my problem get solved. Many thanks to Lambert. Good Work !! Keep It Up. Regards, Avinash Devkate.