DOCUMENT:Q166635 11-JUN-2002 [exchange] TITLE :XWEB: Setting the Default Logon Domain for IIS PRODUCT :Microsoft Exchange PROD/VER::5.5 OPER/SYS: KEYWORDS:kbusage ====================================================================== ------------------------------------------------------------------------------- The information in this article applies to: - Microsoft Outlook Web Access, version 5.5 ------------------------------------------------------------------------------- IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base: Q256986 Description of the Microsoft Windows Registry SYMPTOMS ======== When you use a Web browser to access a Microsoft Exchange Server using basic (clear text) password authentication, you must enter the user name and password manually. If you have multiple Windows NT domains and the user account resides in a domain different from that of the Microsoft Internet Information Server (IIS) computer, you must enter DOMAIN\USERNAME for the user name. WORKAROUND ========== WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk. You can work around this issue by adding the following information into the registry on the IIS computer with the Active Server Components. This will allow users to enter only the user name and password and not the domain name also. 1. Start Registry Editor (Regedt32.exe or Regedit.exe as appropriate for your version of Windows NT). 2. Go to the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\W3SVC\Parameters key in the registry. 3. On the Edit menu, click "New Value", and then click "String Value". 4. Enter a new string value called DefaultLogonDomain with data of the DomainName (where DomainName is the name of the domain where the user account resides). 5. Quit Registry Editor. Restart all of the IIS services for the changes to take effect. NOTE: There have been a few problems with this if your IIS computer is not a Primary Domain Controller or a Backup Domain Controller, or if you arerunning IIS 4.0. If you are running IIS 4.0, follow these steps using the IIS Server Manager for IIS 4.0: 1. Right click the "Default Web Site" and then click Properties. 2. Click the "Directory Security" Tab. 3. In the "Anonymous Access and Authentication Control" Section, click the Edit button. 4. Click to check the "Basic Authentication (Password is sent in Clear Text)" checkbox. 5. Click the Edit button. 6. Enter the Default Domain. Additional query words: owa ====================================================================== Keywords : kbusage Technology : kbOutlookSearch kbOWASearch kbOWA550 Version : :5.5 Issue type : kbhowto kbinfo ============================================================================= THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY. Copyright Microsoft Corporation 2002.