Print View

IE7 fails to authenticate an Intranet site with 401.2 error using Integrated Windows Authentication and FQDN

Issue

When trying to connect to an internal (domain) website that uses Integrated Windows Authentication using a fully qualified domain name (server.domain.com) the user is prompted for authentication. If the authentication is cancelled the follow error is displayed:

You are not authorized to view this page
HTTP Error 401.2 - Unauthorized: Access is denied due to server configuration.

If the short name is used authentication passes through as expected.

Resolution

This is a feature of Internet Explorer 7. To resolve the issue:

- Select Tools | Internet Options
- Select the Security tab
- Select Local Intranet (if this is the zone the affected website appears in)
- Click Custom level...
- Under User Authentication | Logon select "Automatic logon only in Intranet Zone" or "Automatic logon with current username and password"
- Click OK
- Click OK

This can also be set in Group Policy in the following location:

- User Configuration | Administrative Templates | Windows Components | Internet Explorer | Internet Control Panel | Security Page | Intranet Zone | Logon options

Alternatively add the site to the Trusted Sites zone:

- Select Tools | Internet Options
- Select the Security tab
- Select Trusted sites
- Click Sites
- Click Add
- Click Close
- Click OK

Products

Microsoft Internet Explorer 7

Created: 9th June 2008
Updated: 9th June 2008

Print View

© 2005-2024 Jamie Morrison