We have recently changed our SharePoint on-premise authentication method from NTLM only to Kerberos/NTLM. Since then when we try to login from Internet (no kerberos) IE causes trouble getting a 401 (Unauthorized) due to the fact that it does not fall back to NTLM, but wants to use Kerberos instead. This behaviour only applies to IE and Edge, other browsers like Chrome or Firefox due proper NTLM. The Response Header I see in IE is correct (WWW-Authenticate: Negotiate, NTLM), though. Just that both IE or Edge always only try kerberos which fails fro outside our corporate network or VPN. It doesn't look to me like it owuld be a Firewall or IIS Server issues, since other browsers (non-Microsoft) do properly work with NTLM within the same scenario. BTW, there is a similar situation with Dynamics CRM on-premise, I am not an expert here, but with this when trying to browse the internal URL from WAN (which might not be the right approach, but firewall-wise it is allowed), we get the same issue with IE/Edge. Using internet-faced deployment URL for CRM via ADFS, this works with IE/Edge too from outside corporate network. This seems to be the same cause, these browsers to not fall back to NTLM if Kerberos isn't available.
After I got my Kerberos Ticket once, until it expires or I purge it, I can work with these browser from outside LAN too.

IE security Settings is set to Enable Integrated Windows Authenticaton and servers in charge are members of Local Intranet Security zone

kind regards,

Dieter

↧

Certificate Revocation Alert

October 11, 2018, 7:35 am

≫ Next: How to set any url to New Tab of Microsoft Edge browser through Group Policy.

≪ Previous: IE/Edge do not fall back to NTLM if Kerberos not available

I have a user who gets a security alert in IE 11 - Revocation information for the security certificate for this site is not available. Do you want to proceed?
She gets this going to all sorts for websites, Accuweather, Microsoft, many others, that I know have valid certificates. I view the certs on her machine, they look fine, dates, names, etc. Her windows 7 is up to date. The certificates MMC plug in shows the trusted root certificates as it should. Anybody have a clue how to fix this?

↧

How to set any url to New Tab of Microsoft Edge browser through Group Policy.

March 2, 2017, 7:42 am

≫ Next: Microsoft Edge for MacOS

≪ Previous: Certificate Revocation Alert

I have a requirement to set a specific url into New Tab via Group policy for Microsoft Edge. As of now While opening a new Tab page in Edge, default page (Which is set by microsoft) is opening. So I need to set a specific URL into New Tab. So when i will open a new Tab, it will redirect to specific URL only.

Can you please let me know the Solution ASAP.

↧

Microsoft Edge for MacOS

October 18, 2018, 12:54 am

≫ Next: unable to open https://login.microsoftonline.com

≪ Previous: How to set any url to New Tab of Microsoft Edge browser through Group Policy.

Is there any plan to bring Microsoft Edge for MacOS?

↧

unable to open https://login.microsoftonline.com

October 18, 2018, 6:06 pm

≫ Next: Change default location when upload file

≪ Previous: Microsoft Edge for MacOS

why can I not open https://login.microsoftonline.com when I have been using it every day?

↧

Change default location when upload file

October 14, 2018, 2:10 am

≫ Next: OST to PST

≪ Previous: unable to open https://login.microsoftonline.com

Hello

when i'm on webiste and want to upload file, the file browser opened and i go to the location where the file i want to upload is there. Next time when i want to upload a file, it goes to the last directory that i uploaded before. i want to change (through registry) the default path. so everytime i want to upload files, it will go the specific location that i set before. please assist .

↧

OST to PST

August 6, 2018, 3:52 am

≫ Next: Cannot install IE11 on Server 2008 R2

≪ Previous: Change default location when upload file

How can I convert OST file format to PST file format in MS Outlook?

↧

Cannot install IE11 on Server 2008 R2

October 24, 2018, 5:55 am

≫ Next: Can’t connect securely to this page

≪ Previous: OST to PST

I have a 2008 R2 Standard, 64 bit, 32 GB ram, that will not install IE11. Plenty of disk space. Windows updates gets applied every month but IE is the pink elephant in the room.
Here is what I have:
"Internet Explorer did not finish installing For information see the Internet Explorer Troubleshooter. This link is also on your desktop"
When I click the link in the above pop up, I get

application not found.

Looking in event viewer:
In setup - Package KB2841134 failed to be changed to the Installed state. Status: 0x80070002.
In Application Event 1001 -
Fault bucket , type 0
Event Name: CbsPackageServicingFailure2
Response: Not available
Cab Id: 0
Problem signature:
P1: 6.1.7601.23505
P2: Microsoft-Windows-InternetExplorer-Package-TopLevel
P3: 11.2.9600.16428
P4: amd64
P5: unknown
P6: 80070002
P7: Stage
P8: Resolved
P9: Installed
P10: DISM Package Manager Provider
Attached files:
C:\Windows\Logs\CBS\CbsPersist_20180817173115.cab
C:\Windows\Logs\CBS\CbsPersist_20180915231046.cab
C:\Windows\Logs\CBS\CbsPersist_20180916025506.cab
C:\Windows\Logs\CBS\CbsPersist_20181013210537.cab
C:\Windows\Logs\CBS\CbsPersist_20181013224838.cab
C:\Windows\Logs\CBS\CBS.log
C:\Windows\servicing\Sessions\Sessions.xml
C:\Windows\winsxs\poqexec.log
C:\Windows\inf\setupapi.dev.log
These files may be available here:

Analysis symbol:
Rechecking for solution: 0
Report Id: cfef9c92-d78a-11e8-bea6-6eae8b6019b9

↧