rick@ftb

When using the MMC App Center snap-in for a new AC cluster I'm challenged for
a domain login to the cluster controller each time I attempt to access any
cluster information via the snap-in. If I'm on the cluster controller I'm OK
but if I attempt the access remotely it prompts for user ID and password with
the corresponding error message on login:
*** HTTP Error 401.1 - Unauthorized: Access is denied due to invalid
credentials. Internet Information Services (IIS) ***

I've included the accessing domain account into the ACA_machinename group on
the cluster controller and have restarted IIS on the controller to no avail.
This is a Windows Server 2003 App Center cluster. Any ideas on what I'm
missing here? Thanks.
--
Rick

gcheng@onlinemicrosoftcom george cheng

What is the IIS authentication set to for the App Center web site? Do you
have IE hardening enabled?
Thank You

George Cheng

Application Center2000/Index Server/Commerce Server Support

Application Center 2000 SP2 and Windows 2003 SP1
891330 You may experience problems after you install Windows Server 2003
Service Pack 1 on a server that is running Application Center 2000

http://download.microsoft.com/download/b/4/4/b44a9ae4-745e-4015-a4f3-7218096
89d65/HotfixQFE891330.exe

Note: This article has no warranties implicit or ********.
All the content is given on the "as is" basis and the user
takes full responsibility for its use and assumption.
Microsoft Corporation Copyright 2005
All Rights Reserved

--------------------
| Thread-Topic: App Center MMC Snap-In Access Problem
| thread-index: AcahS01zTFpad0l+TJ++SES/qBX/wQ==
| X-WBNR-Posting-Host: 168.240.1.2
| From: =?Utf-8?B?Umlja0BGVEI=?= <RickFTB@discussions.microsoft.com>
| Subject: App Center MMC Snap-In Access Problem
| Date: Thu, 6 Jul 2006 15:27:02 -0700
| Lines: 14
| Message-ID: <BE2D890A-F5D6-40E6-B3C2-24CE43FB2CAC@microsoft.com>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| Newsgroups: microsoft.public.applicationcenter.admin
| Path: TK2MSFTNGXA01.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.applicationcenter.admin:6634
| NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
| X-Tomcat-NG: microsoft.public.applicationcenter.admin
|
| When using the MMC App Center snap-in for a new AC cluster I'm challenged
for
| a domain login to the cluster controller each time I attempt to access
any
| cluster information via the snap-in. If I'm on the cluster controller I'm
OK
| but if I attempt the access remotely it prompts for user ID and password
with
| the corresponding error message on login:
| *** HTTP Error 401.1 - Unauthorized: Access is denied due to invalid
| credentials. Internet Information Services (IIS) ***
|
| I've included the accessing domain account into the ACA_machinename group
on
| the cluster controller and have restarted IIS on the controller to no
avail.
| This is a Windows Server 2003 App Center cluster. Any ideas on what I'm
| missing here? Thanks.
| --
| Rick
|

rick@ftb

The authentication levels are 'Integrated Windows' for both nodes in this
cluster. I tried 'anonymous access' just to see how it would respond to no
avail. I'm not quite sure what you mean when you mention enabling IE
hardening - any specific settings I should look for or change here?
--
Rick

gcheng@onlinemicrosoftcom george cheng

Check in add/remove programs.

In the Windows Server 2003 family, IE Hardening is enabled by default. This
setting affects the user interface and some aspects of setup.
If IE Hardening is enabled you will not be able to access the Application
Center Web console or the Application Center MMC Administrator console. In
order to open these consoles you must add the host name for the computer to
the Local Intranet Sites list in IE. You must also add the name of each
cluster member to this list to ensure that load balanced requests do not
generate an authentication prompt.
If IE Hardening is enabled and you try to install Application Center from a
remote server or share you will be asked to provide confirmation for the
setup program. To avoid this and other potential setup issues you must add
the host name of the remote server or share to IE's list of Local Intranet
Sites. Do not use Localhost to identify this server

Thank You

George Cheng

Application Center2000/Index Server/Commerce Server Support

Application Center 2000 SP2 and Windows 2003 SP1
891330 You may experience problems after you install Windows Server 2003
Service Pack 1 on a server that is running Application Center 2000

http://download.microsoft.com/download/b/4/4/b44a9ae4-745e-4015-a4f3-7218096
89d65/HotfixQFE891330.exe

Note: This article has no warranties implicit or ********.
All the content is given on the "as is" basis and the user
takes full responsibility for its use and assumption.
Microsoft Corporation Copyright 2005
All Rights Reserved

--------------------
| Thread-Topic: App Center MMC Snap-In Access Problem
| thread-index: AcavULaJJUGqjsCbQP+XNfagbZxu2g==
| X-WBNR-Posting-Host: 168.240.1.2
| From: =?Utf-8?B?Umlja0BGVEI=?= <RickFTB@discussions.microsoft.com>
| References: <BE2D890A-F5D6-40E6-B3C2-24CE43FB2CAC@microsoft.com>
<uEoVdTepGHA.2028@TK2MSFTNGXA01.phx.gbl>
| Subject: RE: App Center MMC Snap-In Access Problem
| Date: Mon, 24 Jul 2006 11:41:02 -0700
| Lines: 78
| Message-ID: <CB4B483C-400F-4537-BD90-B17F034E1AF1@microsoft.com>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| Newsgroups: microsoft.public.applicationcenter.admin
| Path: TK2MSFTNGXA01.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.applicationcenter.admin:6649
| NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
| X-Tomcat-NG: microsoft.public.applicationcenter.admin
|
| The authentication levels are 'Integrated Windows' for both nodes in this
| cluster. I tried 'anonymous access' just to see how it would respond to
no
| avail. I'm not quite sure what you mean when you mention enabling IE
| hardening - any specific settings I should look for or change here?
| --
| Rick
|
|


| > What is the IIS authentication set to for the App Center web site? Do you
| > have IE hardening enabled?
| > Thank You
| >
| > George Cheng
| >
| > Application Center2000/Index Server/Commerce Server Support
| >
| > Application Center 2000 SP2 and Windows 2003 SP1
| > 891330 You may experience problems after you install Windows Server 2003
| > Service Pack 1 on a server that is running Application Center 2000
| >
| > http://download.microsoft.com/download/b/4/4/b44a9ae4-745e-4015-a4f3-7218096
| > 89d65/HotfixQFE891330.exe
| >
| > Note: This article has no warranties implicit or ********.
| > All the content is given on the "as is" basis and the user
| > takes full responsibility for its use and assumption.
| > Microsoft Corporation Copyright 2005
| > All Rights Reserved
| >
| > --------------------
| > | Thread-Topic: App Center MMC Snap-In Access Problem
| > | thread-index: AcahS01zTFpad0l+TJ++SES/qBX/wQ==
| > | X-WBNR-Posting-Host: 168.240.1.2
| > | From: =?Utf-8?B?Umlja0BGVEI=?= <RickFTB@discussions.microsoft.com>
| > | Subject: App Center MMC Snap-In Access Problem
| > | Date: Thu, 6 Jul 2006 15:27:02 -0700
| > | Lines: 14
| > | Message-ID: <BE2D890A-F5D6-40E6-B3C2-24CE43FB2CAC@microsoft.com>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| > | Newsgroups: microsoft.public.applicationcenter.admin
| > | Path: TK2MSFTNGXA01.phx.gbl
| > | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.applicationcenter.admin:6634
| > | NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
| > | X-Tomcat-NG: microsoft.public.applicationcenter.admin
| > |
| > | When using the MMC App Center snap-in for a new AC cluster I'm challenged
| > for
| > | a domain login to the cluster controller each time I attempt to access
| > any
| > | cluster information via the snap-in. If I'm on the cluster controller I'm
| > OK
| > | but if I attempt the access remotely it prompts for user ID and password
| > with
| > | the corresponding error message on login:
| > | *** HTTP Error 401.1 - Unauthorized: Access is denied due to invalid
| > | credentials. Internet Information Services (IIS) ***
| > |
| > | I've included the accessing domain account into the ACA_machinename group
| > on
| > | the cluster controller and have restarted IIS on the controller to no
| > avail.
| > | This is a Windows Server 2003 App Center cluster. Any ideas on what
I'm
| > | missing here? Thanks.
| > | --
| > | Rick
| > |
| >
| >
|