URGENT - IIS Permissions

[ITGURU]

Hi

I've had an IIS site running under SSL for several years under an old Domain name . The site directory uses Windows Authentication so it checks the permissions on the folder. if the logged in user is part of the security group it open without needing to login. for anyone else, and external access it prompts for the login box.

 

I have now changed domain names, and imported the ssl certificate and assigned to the IIS site.

 

When I now browse to the same link I only get a login box, entering staff credentials allows the page to open, student credentials it denies. I don't know why it is now prompting rather than just opening.

 

If I enable anonymous authentication it goes through, but with that disabled an only windows auth enabled I get prompted.

 

Any ideas what else cause be wrong as nothing else has changed apart from the SSL certificate and change the header address in IIS for the site.

 

Thanks.

[Steve21]

When you say the domain is it an external one? As would need to add it to intranet sites in IE etc

 

Steve

[ITGURU]

Basically I have changed the SSL certification from being a .lincs.sch.uk domain to a .org.uk domain but its still through an official provider (godaddy)

[Steve21]

But windows authentication only works on local intranet sites, so unless your new .org.uk domain has been added as one within IE it won't auto log into it.

 

If you just do a test and put it in manually and try it does it work?

 

Steve

[ITGURU]

I didn't have to with the old one because the domain is in the proxy exceptions and in IT, the following are ticked.

[Achandler]

When you ping it does it go to the internal address or the external one? Proxy excpetions are all well and good but if the IP is an external one then it would then be outside coming in always and ignore windows auth.

[ITGURU]

When you ping it does it go to the internal address or the external one? Proxy excpetions are all well and good but if the IP is an external one then it would then be outside coming in always and ignore windows auth.

 

It responds with the internal IP.

[Steve21]

Did you try it with the intranet site way? Will quickly narrow it down

 

Steve

[ITGURU]

OK - so for some reason if I add the new one into the browser as an local intranet site, it then works, but not had to do this with our old one.

 

However, I don't seem to be able to set this in the GPO for all users. When I go to Intranet, 'sites' is greyed out.. where do I add the local site for all users?

 

[Steve21]

Zone to site locations via GPO/Reg - How to use Group Policy to configure Internet Explorer security zone sites

 

Steve