"The page cannot be displayed" for non domain users

Hi, I have an intranet situation where I connect to the lan with my laptop,
but I'm not a member of the domain.
the IIS is hosting a 'MyProfile' website based on asp.net 2.0 with NTLM
security enabled and anonymous disabled.
I can ping 'MyProfile' but when I try to browse to http://MyProfile I get a
"page cannot by displayed".
Domain users can access http://MyProfile without any problem.
It is not a dns issue because I can access another intranet site (WSS) on
the same IIS (and he is asking for NTLM credentials, witch not happen on the
other site).
Also the log file is registering my request, so it really goes through the
IIS.
Please help
Bart

RE: "The page cannot be displayed" for non domain users

Hi Bart,

Let's use webfetch to trace the rawdata of http request/response and
determine if the problem is actually on server-side.

HOW TO: Use Wfetch.exe to Troubleshoot HTTP Connections
http://support.microsoft.com/default.aspx?scid=kb;en-us;2842 85

To use, please input:

Host: (Your servername)
Path: (The relative path of your page. e.g: /simple.htm)
Auth: (in case the site is anonymous enabled, just use Anonymous, otherwise
please specify proper user credential)

Press Go! to issue to http request to the server and check what response is
returned. I think the trace should slow us with the details. Please paste
the whole log data here.

I'll wait for your update. Thanks.

Best regards,

WenJun Zhang
Microsoft Online Partner Support

This posting is provided "AS IS" with no warranties, and confers no rights.

RE: "The page cannot be displayed" for non domain users

Hi WenJun,

It is strange. The Wfetch utility is able to get true.
The first atemp returns the page I get in the IE. He is doing a second atemp
(with NTLM) and he get true.
When I use IE I never get the NTLM authentication window:
see my wfetch log below:

started....WWWConnect::Connect("myprofile","80")\nIP =
"192.168.1.11:80"\nsource port: 1193\r\n
SEC_I_CONTINUE_NEEDED - InitializeSecurityContext\nREQUEST:
**************\nGET /company.aspx HTTP/1.1\r\n
Host: myprofile\r\n
Accept: */*\r\n
Connection: Keep-Alive\r\n
Authorization: NTLM
TlRMTVNTUAABAAAAl4II4gAAAAAAAAAAAAAAAAAAAAAFASgKAAAADw==\r\n
\r\n
RESPONSE: **************\nHTTP/1.1 401 Unauthorized\r\n
Content-Length: 1539\r\n
Content-Type: text/html\r\n
Server: Microsoft-IIS/6.0\r\n
WWW-Authenticate: NTLM
TlRMTVNTUAACAAAAEAAQADgAAAAVgoniF+bxxag5VoQAAAAAAAAAALIAsgBI AAAABQLODgAAAA9ZAEMATwBNAE0ATABPAEMAAgAQAFkAQwBPAE0ATQBMAE8A QwABAA4AUwBRAEwAUwBFAFIAVgAEACQAeQBjAG8AbQBtAC0AZQB1AHIAbwBw AGUALgBsAG8AYwBhAGwAAwA0AHMAcQBsAHMAZQByAHYALgB5AGMAbwBtAG0A LQBlAHUAcgBvAHAAZQAuAGwAbwBjAGEAbAAFACQAeQBjAG8AbQBtAC0AZQB1 AHIAbwBwAGUALgBsAG8AYwBhAGwAAAAAAA==\r\n
X-Powered-By: ASP.NET\r\n
Date: Mon, 06 Feb 2006 08:33:28 GMT\r\n
\r\n
SEC_E_OK - InitializeSecurityContext\n HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">\r\n
\r\n
\r\n
\r\n

id="aspnetForm">\r\n
value="/wEPDwUIMjQ4NTIzOTEPZBYCZg9kFgICAw9kFgQCAQ88KwAJAgAPF gQeDU5ldmVyRXhwYW5kZWRkHgtfIURhdGFCb3VuZGdkCBQrAAIFAzA6MBQrA AIWDB4EVGV4dAUKTXkgUHJvZmlsZR4FVmFsdWUFCk15IFByb2ZpbGUeDFNlb GVjdEFjdGlvbgsqLlN5c3RlbS5XZWIuVUkuV2ViQ29udHJvbHMuVHJlZU5vZ GVTZWxlY3RBY3Rpb24DHghEYXRhUGF0aAUkNmVlNGE5MWYtNmViYS00MjM0L WE0ODMtNDQ4MjYwMDMyMTM2HglEYXRhQm91bmRnHghFeHBhbmRlZGcUKwAEB QswOjAsMDoxLDA6MhQrAAIWDB8CBQpNeSBDb21wYW55HwMFCk15IENvbXBhb nkfBAsrBAMfBQUkOTQ2ZGRjZDctYjNkYS00Y2RhLWI2Y2UtY2NhN2E0MjM1N GQwHwZnHwdnFCsAAwUHMDowLDA6MRQrAAIWDh8CBQdDb21wYW55HwMFB0Nvb XBhbnkeC05hdmlnYXRlVXJsBQ0vQ29tcGFueS5hc3B4HwUFDS9jb21wYW55L mFzcHgfBmceCFNlbGVjdGVkZx8HZ2QUKwACFgwfAgUIQ29udGFjdHMfAwUIQ 29udGFjdHMfCAUOL2NvbnRhY3RzLmFzcHgfBQUOL2NvbnRhY3RzLmFzcHgfB mcfB2dkFCsAAhYMHwIFB015IEpvYnMfAwUHTXkgSm9icx8IBQwvTXlKb2JzL mFzcHgfBQUML215am9icy5hc3B4HwZnHwdnZBQrAAIWDB8CBQtNeSBIb2xpZ GF5cx8DBQtNeSBIb2ZGF5cx8IBRAvTXlIb2xpZGF5cy5hc3B4HwUFEC9teWh vbGlkYXlzLmFzcHgfBmcfB2dkZAIDD2QWAgIDDw8WAh8CBUFFeGNlcHRpb24 gb2YgdHlwZSAnU3lzdGVtLldlYi5IdHRwVW5oYW5kbGVkRXhjZXB0aW9uJyB 3YXMgdGhyb3duLmRkGAEFHl9fQ29udHJvbHNSZXF1aXJlUG9zdEJhY2tLZXl fXxYBBQ9jdGwwMCRUcmVlVmlldzFc7u3oexxc8Sy+pMi0UXZihscPhQ==" />\r\n
\r\n

\r\n
\r\n
\r\n
\r\n
\r\n
\r\n
\r\n

\r\n width="0" height="0" border="0" /> \r\n \t\r\n \t\t\r\n \t\t\t\r\n \t\t\r\n \t\t\t\r\n \t\t\r\n \t src="/WebResource.axd?d=j_8KBrck3-_NFSOScpYgX7hYJo8myU2vJ1M0 JO9TRguS7zQ5mfNcQgNmc6k6felC0&t=632689698296718094" alt="Collapse My Profile" border="0" /> id="ctl00_TreeView1t0">My Profile \r\n \t\t\r\n \t\t\t\r\n \t\t\r\n \t\t\t\r\n \t\t\r\n \t\t\t\r\n \t\t\r\n \t \r\n \t\t\t\t\r\n \t\t\t\t\t\r\n \t\t\t\t\r\n \t\t\t href="javascript:__doPostBack('ctl00$TreeView1','tMy Profile\\My Company')"> src="/WebResource.axd?d=j_8KBrck3-_NFSOScpYgX7hYJo8myU2vJ1M0 JO9TRguS7zQ5mfNcQgNmc6k6felC0&t=632689698296718094" alt="Collapse My Company" border="0" /> id="ctl00_TreeView1t1">My Company \r\n \t\t\r\n \t\t\t\r\n \t\t\r\n \t\t\t\r\n \t\t\r\n \t\t\t\r\n \t\t\r\n \t \r\n \t\t\t\t\r\n \t\t\t\t\t\r\n \t\t\t\t\r\n \t\t\t \r\n \t\t\t\t\r\n \t\t\t\t\t\r\n \t\t\t\t\r\n \t\t\t src="/WebResource.axd?d=j_8KBrck3-_NFSOScpYgXz-WkZdL_pCyS_yg FetsbA70xULPtzruIZY0V1EyWAEy0&t=632689698296718094" alt="" /> id="ctl00_TreeView1t2"> size="1">Company \r\n \t\t\r\n \t\t\t\r\n \t\t\r\n \t\t\t\r\n \t\t\r\n \t\t\t\r\n \t\t\r\n \t \r\n \t\t\t\t\r\n \t\t\t\t\t\r\n \t\t\t\t\r\n \t\t\t \r\n \t\t\t\t\r\n \t\t\t\t\t\r\n \t\t\t\t\r\n \t\t\t src="/WebResource.axd?d=j_8KBrck3-_NFSOScpYgXz-WkZdL_pCyS_yg FetsbA70xULPtzruIZY0V1EyWAEy0&t=632689698296718094" alt="" /> id="ctl00_TreeView1t3"> size="1">Contacts \r\n \t\t\r\n \t\t\t\r\n \t\t\r\n \t\t\t\r\n \t\t\r\n \t\t\t\r\n \t\t\r\n \t \r\n \t\t\t\t\r\n \t\t\t\t\t\r\n \t\t\t\t\r\n \t\t\t src="/WebResource.axd?d=j_8KBrck3-_NFSOScpYgXz-WkZdL_pCyS_yg FetsbA70xULPtzruIZY0V1EyWAEy0&t=632689698296718094" alt="" /> id="ctl00_TreeView1t4">My Jobs \r\n \t\t\r\n \t\t\t\r\n \t\t\r\n \t\t\t\r\n \t\t\r\n \t\t\t\r\n \t\t\r\n \t \r\n \t\t\t\t\r\n \t\t\t\t\t\r\n \t\t\t\t\r\n \t\t\t src="/WebResource.axd?d=j_8KBrck3-_NFSOScpYgXz-WkZdL_pCyS_yg FetsbA70xULPtzruIZY0V1EyWAEy0&t=632689698296718094" alt="" /> id="ctl00_TreeView1t5">My Holidays \r\n \r\n

width="100%">\r\n \r\n Dear supplier, your profile is currently unavailable. We apologize for the inconvenience. Please try again in one hour. Thank you.\r\n \r\n \r\n \r\n Exception of type 'System.Web.HttpUnhandledException' was thrown. \r\n \r\n \r\n \r\n

\r\n

\r\n
\r\n
\r\n
\r\n

\r\n
\r\n
value="/wEWAwK+/rPaAgK1k5qNBAKOpYWRDU9dqmKxZd5/GyhbhFgW8LhbX jE7" />

RE: "The page cannot be displayed" for non domain users

Yes, the trace indicates server-side is working ok. The problem should be
on your IE client. You can restore IE Internet security setting to default
level to have a test, and also remove any existing proxy settings if they
are not required.

Best regards,

WenJun Zhang
Microsoft Online Partner Support

This posting is provided "AS IS" with no warranties, and confers no rights.

RE: "The page cannot be displayed" for non domain users

Hi,
When I uncheck 'integrated security' I can just browse.
When I check 'integrated security' he isn't asking for credentials.
I tried also to reset to default settings, but no avail.

What else can I try?
Thanks

""WenJun Zhang[msft]"" wrote:

> Yes, the trace indicates server-side is working ok. The problem should be
> on your IE client. You can restore IE Internet security setting to default
> level to have a test, and also remove any existing proxy settings if they
> are not required.
>
> Best regards,
>
> WenJun Zhang
> Microsoft Online Partner Support
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>
>

RE: "The page cannot be displayed" for non domain users

Hi,

Do you mean the setting 'Enable Integrated Windows Authentication' in IE
Internet Options->Advanced?

When 'Enable Integrated Windows Authentication' is disabled, IE will use
NTLM to connect to IIS (with integrated auth). When the option is enabled,
Kerberos will be used. If Kerberos doesn't work in your domain, then the
authentication will fail.

Please let me know if this is just the case. Thanks.

Best regards,

WenJun Zhang
Microsoft Online Partner Support

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================

Business-Critical Phone Support (BCPS) provides you with technical phone
support at no charge during critical LAN outages or "business down"
situations. This benefit is available 24 hours a day, 7 days a week to all
Microsoft technology partners in the United States and Canada.

This and other support options are available here:

BCPS:
https://partner.microsoft.com/US/technicalsupport/supportove rview/40010469
Others: https://partner.microsoft.com/US/technicalsupport/supportove rview/

If you are outside the United States, please visit our International
Support page: http://support.microsoft.com/common/international.aspx

======================================================

PLEASE NOTE the newsgroup SECURE CODE and PASSWORD will be updated at 9:00
AM PST, February 14, 2006. Please complete a re-registration process by
entering the secure code mmpng2006 when prompted. Once you have entered the
secure code mmpng2006, you will be able to update your profile and access
the partner newsgroups.

======================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

RE: "The page cannot be displayed" for non domain users

No, I mean in IIS6.0

""WenJun Zhang[msft]"" wrote:

> Hi,
>
> Do you mean the setting 'Enable Integrated Windows Authentication' in IE
> Internet Options->Advanced?
>
> When 'Enable Integrated Windows Authentication' is disabled, IE will use
> NTLM to connect to IIS (with integrated auth). When the option is enabled,
> Kerberos will be used. If Kerberos doesn't work in your domain, then the
> authentication will fail.
>
> Please let me know if this is just the case. Thanks.
>
> Best regards,
>
> WenJun Zhang
> Microsoft Online Partner Support
>
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
>
> =====================================================
>
> Business-Critical Phone Support (BCPS) provides you with technical phone
> support at no charge during critical LAN outages or "business down"
> situations. This benefit is available 24 hours a day, 7 days a week to all
> Microsoft technology partners in the United States and Canada.
>
> This and other support options are available here:
>
> BCPS:
> https://partner.microsoft.com/US/technicalsupport/supportove rview/40010469
> Others: https://partner.microsoft.com/US/technicalsupport/supportove rview/
>
> If you are outside the United States, please visit our International
> Support page: http://support.microsoft.com/common/international.aspx
>
> ======================================================
>
> PLEASE NOTE the newsgroup SECURE CODE and PASSWORD will be updated at 9:00
> AM PST, February 14, 2006. Please complete a re-registration process by
> entering the secure code mmpng2006 when prompted. Once you have entered the
> secure code mmpng2006, you will be able to update your profile and access
> the partner newsgroups.
>
> ======================================================
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>
>

RE: "The page cannot be displayed" for non domain users

Let's use webfetch to trace the rawdata of http request/response and
determine if the problem is actually on server-side. Please make sure
integrated windows authentication is selected in IIS.

HOW TO: Use Wfetch.exe to Troubleshoot HTTP Connections
http://support.microsoft.com/default.aspx?scid=kb;en-us;2842 85

To use, please input:

Host: (Your servername)
Path: (The relative path of your page. e.g: /simple.htm)
Auth: (Select NTLM and specify proper user credential)

Press Go! to issue a http request to the server and check what response is
returned. I think the trace should slow us with the details. Please paste
the whole log data here.

I'll wait for your update. Thanks.

Best regards,

WenJun Zhang
Microsoft Online Partner Support

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================

Business-Critical Phone Support (BCPS) provides you with technical phone
support at no charge during critical LAN outages or "business down"
situations. This benefit is available 24 hours a day, 7 days a week to all
Microsoft technology partners in the United States and Canada.

This and other support options are available here:

BCPS:
https://partner.microsoft.com/US/technicalsupport/supportove rview/40010469
Others: https://partner.microsoft.com/US/technicalsupport/supportove rview/

If you are outside the United States, please visit our International
Support page: http://support.microsoft.com/common/international.aspx

======================================================

PLEASE NOTE the newsgroup SECURE CODE and PASSWORD will be updated at 9:00
AM PST, February 14, 2006. Please complete a re-registration process by
entering the secure code mmpng2006 when prompted. Once you have entered the
secure code mmpng2006, you will be able to update your profile and access
the partner newsgroups.

======================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

RE: "The page cannot be displayed" for non domain users

We already did that, see my first reply on this thread.
What else can I try?
Thanks a lot
Bart

""WenJun Zhang[msft]"" wrote:

> Let's use webfetch to trace the rawdata of http request/response and
> determine if the problem is actually on server-side. Please make sure
> integrated windows authentication is selected in IIS.
>
> HOW TO: Use Wfetch.exe to Troubleshoot HTTP Connections
> http://support.microsoft.com/default.aspx?scid=kb;en-us;2842 85
>
> To use, please input:
>
> Host: (Your servername)
> Path: (The relative path of your page. e.g: /simple.htm)
> Auth: (Select NTLM and specify proper user credential)
>
> Press Go! to issue a http request to the server and check what response is
> returned. I think the trace should slow us with the details. Please paste
> the whole log data here.
>
> I'll wait for your update. Thanks.
>
> Best regards,
>
> WenJun Zhang
> Microsoft Online Partner Support
>
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
>
> =====================================================
>
> Business-Critical Phone Support (BCPS) provides you with technical phone
> support at no charge during critical LAN outages or "business down"
> situations. This benefit is available 24 hours a day, 7 days a week to all
> Microsoft technology partners in the United States and Canada.
>
> This and other support options are available here:
>
> BCPS:
> https://partner.microsoft.com/US/technicalsupport/supportove rview/40010469
> Others: https://partner.microsoft.com/US/technicalsupport/supportove rview/
>
> If you are outside the United States, please visit our International
> Support page: http://support.microsoft.com/common/international.aspx
>
> ======================================================
>
> PLEASE NOTE the newsgroup SECURE CODE and PASSWORD will be updated at 9:00
> AM PST, February 14, 2006. Please complete a re-registration process by
> entering the secure code mmpng2006 when prompted. Once you have entered the
> secure code mmpng2006, you will be able to update your profile and access
> the partner newsgroups.
>
> ======================================================
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>
>

RE: "The page cannot be displayed" for non domain users

Bart,

Have you also tried switching the option 'Enable Integrated Windows
Authentication' on/off in IE Internet Options? What's the result?

For non-domain users connecting to an integrated auth enabled site, IE
should prompt for username/password. So I think this may be a odd client
side issue.

Have a nice day.

Best regards,

WenJun Zhang
Microsoft Online Partner Support

This posting is provided "AS IS" with no warranties, and confers no rights.