Forum Discussion

anon1m0us1's avatar
anon1m0us1
Level 6
13 years ago

Being prompted for Credentials

I am using EV 10.0.1 and IE 8 & 9, I am being prompted with User Credentials when I click on a shortcut, or any EV button in Outlook.

 

1) I did select to Add to local Intranet in the EV Desktop policy.

2) I verified that the server that is prompting is listed in the policy.

3) My GPO has *.companyname.com in the Trusted Zone.

4) I do not have servername.companyname.com in the Trusted Zone since I assumed the EV policy will add it.

I went through that the Technnote of the 9 items to check like adding Domain Users to Webapp Directory ( I gave them Read & Execute), cleared my Windows Password Manager, etc 

 

In addition, I am still being prompted by Outlook to Autoarchive. Does this get disabled with EV policiy or do I need a GPO to disable it?

 

Thanks.

Enterprise Vault
Information Governance
Troubleshooting
  • TonySterling's avatar
    TonySterling
    13 years ago

    But again, you need to focus on the differences between computers that prompt and ones that don't.  If they all have the same EV policy then it isn't an EV configuration but a desktop configuration, like a GPO or something like that causing the issue.

19 Replies

Sort By
  • AndrewB's avatar
    AndrewB
    Moderator
    13 years ago

    have a look at my solution here:

    https://www-secure.symantec.com/connect/forums/switched-ev-server-new-win2k8-r2-server-now-some-users-prompted-credentials

  • JesusWept3's avatar
    JesusWept3
    Level 6
    13 years ago

    for the permissions of Authenticated Users, you have to give that to the entire EV install directory, not just the webapp, typically you would see that being the issue when you put in your own credentials and it continues prompting and ten you put in the EVAdmin or another admin username/password and it works

    Also look at the name of the server prompting you.
    I know some environments have the machinename.myDomain.com as the actual machine and they add *.myDomain.com to the trusted site or intranet zone list, but the Alias is something like evServer.otherDomain.com

    also you have to specify in the desktop policy the servers to add to the intranet zone

  • anon1m0us1's avatar
    anon1m0us1
    Level 6
    13 years ago

    Authentcated Users is in the EV install directory.

     

    We do not use another domain for the server. It is server.mycompany.com and in IE Local Zone we have *.companyname.com & *.otherdomainforcompany.com. it still does not work.

     

    I also have add to Intranet Zone selected in my Desktop Policy.

  • anon1m0us1's avatar
    anon1m0us1
    Level 6
    13 years ago

    Scenario 1 - Incorrect authentication cached

    Nothing is Cached

     

    Scenario 2 - Permissions lock-down to the Enterprise Vault\Webapp directory

    Authenticated Users, Domain Users, have Read & Execute on the whole EV directory. System & Administrators have Full Access.

     

    Scenario 3 - Additional security lock-down through Internet Explorer (IE)

    This is a Windows 7 machine and does not have Internet Explorer Enhanced Security Configuration for Administrators installed.

    Scenario 4 - The DNS Alias is not listed under IE (Internet Explorer) Security - Local Intranet

     I added the Cluster Name, Server name, and both FQDN in a IE GPO with no difference.

    I also added Add server to Intranet Zone  in the Policy.

     

    Scenario 5 - Accessing Archive Explorer or Search Archives Externally through OWA 2007

    I am accessing it through Outlook client 2007.

     

    Scenario 6 - User Authentication in trusted sites is not set in automatic logon with current username and password

    It’s set correctly in Trusted and Local Zones

     

  • anon1m0us1's avatar
    anon1m0us1
    Level 6
    13 years ago

    I think the issue is with WIndows 7. I checked one of our users on Windows XP and they do not get prompted. Is there a different setting for Windows 7?

  • anon1m0us1's avatar
    anon1m0us1
    Level 6
    13 years ago

    Do you want from the servername or cluster name? This is a win2k8 EV Cluster.

     

    From the server it is:

    MSServerClusterMgmtAPI/evserver1

    MSServerClusterMgmtAPI/evserver1.company.com

    WSMAN/evserver1.company.com

    WSMAN/evserver1

    TERMSRV/evserver1.company.com\

    TERMSRV/evserver1

    RestrictedKrbHost/evserver1

    HOST/evserver1

    RestrictedKrbHost/evserver1.company.com

    HOST/evserver1.company.com

  • anon1m0us1's avatar
    anon1m0us1
    Level 6
    13 years ago

    Why does this work on XP?

     

    Also, when you say the DNS Alias, are you referring to the Server DNS or the Cluster DNS?