Can't enable NTLM in IIS?

Hello,

I'm using IIS6 on Windows 2003 R2 server SP2 and I'm having a problem
with NTLM - I can't seem to enable it.

The problem is happening with Exchange virtual directories but I think
that it's an IIS problem.

So the only application installed on the server is Exchange. The
Default Web Site only has "Anonymous" as authentication method, the
Exchange virtual directory under it has Basic and Integrated
Authentication checked.

Using WFETCH, I've sent a GET to http://server/exchange/mailbox/,
specifying NTLM authentication and entering the username, password and
domain of an admin user with full access to all mailboxes. It returns
401.1.0 access denied error. However, the Exchange-side permissions
are good because Basic Authentication opens any mailbox using the same
admin credentials.

The server may have been installed from a slipstreamed SP1. I've
looked in the MetaBase XML and the NtAuthenticationProviders
correspond to what's indicated in the Property Pages.

Any ideas please?

Thanks,

- Alan.

NTLM authentication is a 2-step handshake

The server sends back a HTTP 401 with a challenge. You need to then create
the appropriate response and send that as part of a new request (this is why
NTLM authentication used to be called NT Challenge/Response Authentication)

Cheers
Ken

"Alan" <bruguy DeleteThis @gmail.com> wrote in message
news:bd3f0179-e5b3-44b2-ae8b-7d2794a60b89@1g2000hsl.googlegroups.com...
> Hello,
>
> I'm using IIS6 on Windows 2003 R2 server SP2 and I'm having a problem
> with NTLM - I can't seem to enable it.
>
> The problem is happening with Exchange virtual directories but I think
> that it's an IIS problem.
>
> So the only application installed on the server is Exchange. The
> Default Web Site only has "Anonymous" as authentication method, the
> Exchange virtual directory under it has Basic and Integrated
> Authentication checked.
>
> Using WFETCH, I've sent a GET to http://server/exchange/mailbox/,
> specifying NTLM authentication and entering the username, password and
> domain of an admin user with full access to all mailboxes. It returns
> 401.1.0 access denied error. However, the Exchange-side permissions
> are good because Basic Authentication opens any mailbox using the same
> admin credentials.
>
> The server may have been installed from a slipstreamed SP1. I've
> looked in the MetaBase XML and the NtAuthenticationProviders
> correspond to what's indicated in the Property Pages.
>
> Any ideas please?
>
> Thanks,
>
> - Alan.
>
>