Dave Burke : Freelance .NET Web Developer specializing in Online Communities

Keywords: IIS NT Authentication SP1

Most of the readers of this blog probably encountered this issue already, a bi-product of W2K3 SP1 and Windows XP SP2.  Since I installed W2K3 SP1 only yesterday on a server while migrating from .NET Beta2-to-RTM on my office network it was a new mystery to solve.  Of course, since I thought it had something to do with installing VS2005 I was sidetracked for a bit.

The problem, any IIS sites requiring NT Authentication prevent you from logging in.  It's not VS2005, it's not an Application Pool identity, it's not an IIS configuration issue.  It's a Service Pack feature.

From the Microsoft Knowledgebase article:

"Windows XP SP2 and Windows Server 2003 SP1 include a loopback check security feature that is designed to help prevent reflection attacks on your computer. Therefore, authentication fails if the FQDN that you use does not match the local computer name."

The fix is to go into the registry and add the DisableLoopbackCheck DWORD to the ...\CurrentControlSet\Control\Lsa key.  I did as instructed, rebooted, and I was back in IIS Happyville.

Comments (2) | Post RSS RSS comment feed

Posted on 11/29/2005 10:33:00 AM by Dave Burke
Categories: .NET
Tags: no tags for this post

Related posts

Comments (2) -

11/29/2005 2:02:56 PM Permalink

Ahhhh....   IIS Happyville...  I think I've been there once.  Smile
Thanks for the heads up Dave!  I was fortunate enough to have a pc that I could stick the beta on, that wasn't required for production.  The VS2005 install on my "production - development" pc (hmmm... odd wording there) went fairly smoothly, although I need more memory!!  (both personnaly and in my pc).

Laura Blood |

11/29/2005 6:57:23 PM Permalink

Laura, to be honest, last time I reached IIS Happyville was after a Windows NT Service Pack.  I forget which one.  Good luck with getting more memory.  Maybe Enhanced Intelligence technologies will come on the scene before it's too late for both of us.  Thanks for visiting!

daveburke |


Powered by BlogEngine.NET 2.0.0.36
Theme by Dave Burke