I'm seeing a similar thing at one of my clients. 5 of the 40 desktops at the site were upgraded to IE7, over the weekend. These are to be used a test bed, to ensure no problems with any of the internal apps that are web based, and the external vendor web sites that they need use on a day to day basis. On the desktops that have been upgraded to IE7, there is a constant stream of password boxes when browsing the internet. Even visiting sites like CNN.COM, NASA.GOV, MICROSOFT.COM, is generating password requests. Same user logs onto a desktop with IE6, visits the same web site, no password boxes. As no change has been made to the ISA server, I don't see this as an ISA generated issue, as such, but IE7 is obviously talking a different language at some point and the ISA is not understanding it, and requesting credentials. Interestingly, if the user types in their username / password, it get rejected, and another password box appears, time after time. However, If I type in another username / password first time it gets rejected, on second attempt it get accepted, the web page displays, however, on the next password box, it get rejected, time after time. And this is standard user, not an admin user. ________________________________ From: isalist-bounce@xxxxxxxxxxxxx on behalf of Jim Harrison Sent: Sun 12/Nov/2006 01:57 To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Internet Explorer 7 password prompt won't work http://www.ISAserver.org <http://www.isaserver.org/> ------------------------------------------------------- Let's clarify a couple of things first: "..it should have problems with Microsoft's own firewall product.." IE7 was tested against ISA 2004 & 2006 (I still hurt from some of that). What you describe is not "normal behavior". "..I think it must be something on the ISA server, that is where the username and password box is coming from.." Not even close; any authentication popup you see is generated by the client application; never the server. It is however generated (again; by the client application) as a result of the server/proxy replying to the request with a "must authenticate" response. Please don't go the "but FBA is generated by the server" route; this isn't an "authentication popup" as we're discussing here. "..my pc is not sending user credentials and appears to be only trying to access the internet as an anonymous user.." Get used to it; this is the way of HTTP communication. It happens as like unto thusly for all web requests. 1. client connects to server/proxy 2. client sends "gimme stuff" 3. server/proxy responds with "tell me who you are" 4. client sends same request as before, but this time with credentials 5. server/proxy responds according to its (dis)like of those credentials Thus, all ISA things being equal between IE testing events, the difference is in IE. Again; this is dependent on "all ISA things being equal"... I too have been playing with ISA & IE through all the various beta & RC releases and have never observed the behavioral changes you describe. Thus, you must have either changed: ISA settings IE settings What you don't state is: - ISA edition; SE or EE? - ISA patches; what SP / rollup level are you running? - IE configuration: - what defaults have you changed? - have you used the very-useful "reset " button (Tools, Internet Options, Advanced, "Reset" button)? -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Chris Addicks Sent: Friday, November 10, 2006 12:20 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Internet Explorer 7 password prompt won't work http://www.ISAserver.org <http://www.isaserver.org/> ------------------------------------------------------- I do not have the "require all users to authenticate" checked. I prefer to specify the authentication in the individual rules since we have some specific client programs that we are required to use that will not provide authentication, so for those destinations and protocols only, I allow non-authenticated traffic through. If I checked the box, like Thor, then these clients would fail. One thing to point out. I did not have this problem with the final RC of IE7. It only occurred when I loaded the released version. We also get the username/password box occasionally even with IE6, but supplying the info clears it. Chris -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thor (Hammer of God) Sent: Friday, November 10, 2006 2:46 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Internet Explorer 7 password prompt won't work http://www.ISAserver.org <http://www.isaserver.org/> ------------------------------------------------------- Except that anonymous access will still be possible. I require all users to authenticate at the listener and have not had any issues like this at all. t ----- Original Message ----- From: "Mark Morgan" <MMorgan@xxxxxxxxxxxxxxxxxxxxx> To: <isalist@xxxxxxxxxxxxx> Sent: Friday, November 10, 2006 11:35 AM Subject: [isalist] Re: Internet Explorer 7 password prompt won't work http://www.ISAserver.org <http://www.isaserver.org/> ------------------------------------------------------- Uncheck "require all users to authenticate" on the ISA, it will still authenticate and your problem should go away. -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Chris Addicks Sent: Friday, November 10, 2006 11:03 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Internet Explorer 7 password prompt won't work http://www.ISAserver.org <http://www.isaserver.org/> ------------------------------------------------------- Ara, I just restarted the whole server and still no luck. I monitored the traffic from my pc on the firewall, and it is failing my general internet access rule because my pc is not sending user credentials and appears to be only trying to access the internet as an anonymous user. Chris -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Ara Avvali Sent: Friday, November 10, 2006 12:12 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Internet Explorer 7 password prompt won't work http://www.ISAserver.org <http://www.isaserver.org/> ------------------------------------------------------- Do you think you can restart firewall service? There will be a shortage but it may help. Sometimes it happens to me and this is the only way I can get it go away. Actually it happens after restarting the PDC -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Chris Addicks Sent: Friday, November 10, 2006 9:06 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Internet Explorer 7 password prompt won't work http://www.ISAserver.org <http://www.isaserver.org/> ------------------------------------------------------- Steve, I just checked and integrated authentication is enabled. I tried loading it on another machine, and still no luck. I think it must be something on the ISA server, that is where the username and password box is coming from. I just can't figure it out. Chris -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Steve Moffat Sent: Friday, November 10, 2006 8:19 AM To: ISA Mailing List Subject: [isalist] Re: Internet Explorer 7 password prompt won't work http://www.ISAserver.org <http://www.isaserver.org/> ------------------------------------------------------- It's not an IE 7 issue, I have just finished a 500 user rollout with no IE7 / ISA issues. Is integrated authentication enabled in IE7 properties? S -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Chris Addicks Sent: Friday, November 10, 2006 9:03 AM To: ISA Mailing List Subject: [isalist] Re: Internet Explorer 7 password prompt won't work http://www.ISAserver.org <http://www.isaserver.org/> ------------------------------------------------------- Roland, Sorry for being dense, but I don't know what you mean by the "section checked passwords". If you mean the checkbox to remember passwords, I have tried it both checked and unchecked. I have also entered my username in all the forms I could think of: domain\username, username@xxxxxxxxxxxx, domain.local\username, etc. I have since unloaded IE7 so I could function, but it strikes me as odd that it should have problems with Microsoft's own firewall product. Chris -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Mueller, Roland Sent: Thursday, November 09, 2006 1:55 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Internet Explorer 7 password prompt won't work http://www.ISAserver.org <http://www.isaserver.org/> ------------------------------------------------------- I would research the section "cheched passwords" on the requesting client. Roland -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Chris Addicks Sent: Tuesday, November 07, 2006 3:35 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Internet Explorer 7 password prompt won't work http://www.ISAserver.org <http://www.isaserver.org/> ------------------------------------------------------- We have been using ISA 2004 for some time now with no problems. We have configured it to require user authentication for access to the internet from our internal network. I have been using IE7 Beta with no real problems, but when I loaded the IE7 production release, I am prompted for a username and password by the isa server, and no matter how I enter it, I cannot get through the firewall. I have also tried to load IE7 on another machine, one that has not had the IE 7 beta, and it does the same thing. Anyone know what is going on here, I am sure it is just something I am missing? Thanks in advance, and my apologies if this has already been covered. I tried to find info on the isaserver.org site, but couldn't. Chris All mail to and from this domain is GFI-scanned. ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com <http://www.techgenix.com/> ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx