Hi All, Over the past month we have replaced our regional DC's with W2K8 R2 DC's the domain is still at 2K3 level. All users use IE8 or IE9. As of yesterday some users in regional offices who connect in over the WAN are unable to connect to our internally hosted portal. They get: 407 Proxy Authentication Required This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g bad password), or your browser doesn't understand how to supply the credentials. To connect to this site they connect to an alias which works fine in Head Office and for some regional users: http://COPortal If they enter the FDN http://COportal.domain.local they are at least prompted for their user details, and once entered they can access the site. The Alias merley points to the FDN of the server and if they enter this http://servername everything works as expected. Any ideas would be appreciated!

Hello, sounds for me that something is changed within IIS for authentication, you may cross-post this in http://forums.iis.net/Best regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Thanks Meinolf, I'll do that as well, just don't see why it would be different for people coming across the WAN as opposed to those on the LAN. If you click on http://COPortal on the local LAN, the page loads as expected. If you click on http://COPortal from a regional office and try to access the site from across the WAN you get: 407 Proxy Authentication Required Surely that's not an IIS issue?

Hi, 407 proxy authentication required is a known issue, This error is returned when you try to access a Web site through a proxy server that has access control turned on while using Basic Authentication. The Web Proxy, through a 407 HTTP response, requests credentials from the browser client (or downstream Proxy Server). The client provides the credentials, or in the case of a downstream Web proxy, the proxy server may provide the credentials itself. If the credentials used by the client or by the downstream proxy server are not allowed by the upstream proxy server, this error will be displayed. Please make sure that the Account Used for Anonymous Access property of the virtual directory or Web site is set to a domain account. By default, this is set to a local account. You can also use one of the following workarounds to resolve this issue: Enable Anonymous authentication on the Proxy Server computer.Use the Microsoft Proxy Client. For more information please refer to following MS articles: Error message "HTTP/1.1 407 proxy authentication required" http://support.microsoft.com/kb/248020 HttpWebRequest WebExcepton: The remote server returned an error: (407) Proxy Authentication Required. http://blogs.msdn.com/b/jpsanders/archive/2009/03/24/httpwebrequest-webexcepton-the-remote-server-returned-an-error-407-proxy-authentication-required.aspx FTP produces "407 Proxy Authentication Required" http://support.microsoft.com/kb/222561 Lawrence TechNet Community Support