Iis – Windows authentication to IIS on local server with fully qualified url

iiswindows-authentication

I have a web application set up in IIS 7 configured with Windows Authentication. I can authenticate to the machine via it's fully qualified url from any other machine and it uses the proper Domain. However, when I try to connect to the machine from itself via the fully qualified domain (either in another service, or just via url in IE), the Windows Login prompt tries to force the use of the computer as the domain, and not the proper domain for logging in. Trying to specify the domain with domain\username or username@domain.com fails.

I should note that viewing the web application via localhost on the machine works, but using the full site.company.com/webservice style url does not work on the local machine, because the login domain is wrong. What can I do to make it use the proper login domain?

Best Answer

I was trying to do the same thing. Access a web site on the local IIS using a FQDN and kept getting told where to go by IIS.

Anyways, from my digging, you have to disable the loopback check for local IIS websites.

See the following Microsoft support page.

In the event the page goes missing, the I did the following (which is what he recommends in the above blog post)

  1. Open up the registry editor by typing regedit under Run.
  2. Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0
  3. Right-click MSV1_0 and click New and choose to make it a Multi-String Value.
  4. Enter BackConnectionHostNames as name for the entry, and double-click it to modify it.
  5. Type the hostnames you need to use (code-journey.com for instance).
  6. Restart IISAdmin Service (“Start” -> “Administrative Tools” -> “Services”)

Hope this helps.

cmb..

Related Topic