XP Client cannot automatically logon to SharePoint 2007 SP2
UPDATED
Here's bit of background
Server SharePoint
- deployed over https only
- SP 2
- Windows 2008 SP1
- recently updated with (KB981332) (KB979683) (KB979309) (KB980232) (KB978542) (KB978338) (KB980248) (KB978601) - the issue not reported before the upgrade
- NTLM authentication
Client:
- Windows XP SP3 (not latest patches)
- https://sharepoint.domain.com added to IE Intranet Sites (controlled by Group policy)
- Intranet Sites configured to automatically logon with current username and password (controlled by Group policy)
- IE 7 or IE 8
Behavior
Whenever domain user is logged on a computer (Windows XP) controlled by Group policy and tries to access SharePoint witn IE 7, they get prompted to enter username and password...
Domain users using Windows XP which is not controlled by group policy and manually configure IE don't have that problem
Domain users using Windows 7 (small test group not controlled by group policy) don't have this problem --- confirmed (accesssing MS Office documents, but that issue is for another thread).
I checked SharePoint Server Security log and this is what i can see as a difference between Windows XP and Windows 7 Clients (NTLM version)
Event ID: 4624
Task Category: Logon
Level: Information
Keywords: Audit Success
User: N/A
Description: An account was successfully logged on.
WINDOWS XP
Subject:
Security ID: NULL SID
Account Name: -
Account Domain: -
Logon ID: 0x0
Logon Type: 3
New Logon:
Security ID: DOMAIN\*********
Account Name: ****************
Account Domain: ************
Logon ID: 0x26bad35
Logon GUID: {00000000-0000-0000-0000-000000000000}
Process Information:
Process ID: 0x0
Process Name: -
Network Information:
Workstation Name: ************
Source Network Address: ************
Source Port: 2727
Detailed Authentication Information:
Logon Process: NtLmSsp
Authentication Package: NTLM
Transited Services: -
Package Name (NTLM only): NTLM V1
Key Length: 0
WINDOWS 7
Subject:
Security ID: NULL SID
Account Name: -
Account Domain: -
Logon ID: 0x0
Logon Type: 3
New Logon:
Security ID: Domain\******
Account Name: ****
Account Domain: Domain
Logon ID: 0x26bc534
Logon GUID: {00000000-0000-0000-0000-000000000000}
Process Information:
Process ID: 0x0
Process Name: -
Network Information:
Workstation Name: *******
Source Network Address: *******
Source Port: 38302
Detailed Authentication Information:
Logon Process: NtLmSsp
Authentication Package: NTLM
Transited Services: -
Package Name (NTLM only): NTLM V2
Key Length: 0
May 18th, 2010 10:29am
Are your IE settings still the same?
In particular are your login settings for the zone in which your site is in still showing "automatic login using current name and passord" *even for the browsers where automatic login isn't working* ?
FAQ sites: (SP 2010) http://wssv4faq.mindsharp.com; (v3)
http://wssv3faq.mindsharp.com and (WSS 2.0)
http://wssv2faq.mindsharp.com
Complete Book Lists (incl. foreign language) on each site.
Free Windows Admin Tool Kit Click here and download it now
May 18th, 2010 3:26pm
Mike, thanks for responding
IE settings didn't change. They're controlled by GP and there were no changes.
May 19th, 2010 12:03pm