{"id":1525,"date":"2012-01-13T07:34:01","date_gmt":"2012-01-13T07:34:01","guid":{"rendered":"http:\/\/www.obieta.com\/?p=1525"},"modified":"2012-01-13T07:34:01","modified_gmt":"2012-01-13T07:34:01","slug":"windows-7-prompting-for-authentication-when-accessing-sharepoint-documents","status":"publish","type":"post","link":"http:\/\/obieta.com\/?p=1525","title":{"rendered":"Windows 7 Prompting for Authentication When Accessing SharePoint Documents"},"content":{"rendered":"<p>\u2019m still enjoying the experience as a new Windows 7 user. However, one of the problems I ran into recently was the repeated and constant prompting for username and password when accessing a document in my SharePoint repository. Actually, I was getting prompted twice despite the fact the SharePoint server is on my local network and in the same domain. Once for the initial SharePoint logon and the second when accessing office documents in a document repository. The first prompt was an easy fix and was due to the fact I access my SharePoint Site using its Fully Qualified Domain Name (FQDN) at sharepoint.company.com. As a result, IE believed the local SharePoint server to be on the Internet and thus considered in the Internet Zone.<\/p>\n<p>To fix this:<\/p>\n<p>1. Open IE, Select Tools \u2013&gt;Internet Options\u00a0 -&gt; Security Tab and Select\u00a0<strong>Sites<\/strong><\/p>\n<p><a href=\"http:\/\/www.quantumofgeek.com\/blog\/wp-content\/uploads\/2010\/02\/image5.png\"><img title=\"image\" src=\"http:\/\/www.quantumofgeek.com\/blog\/wp-content\/uploads\/2010\/02\/image_thumb3.png\" border=\"0\" alt=\"image\" \/><\/a><\/p>\n<p>2. Ensure \u201cAutomatically detect intranet network\u201d is checked and click\u00a0<strong>Advanced<\/strong><\/p>\n<p><a href=\"http:\/\/www.quantumofgeek.com\/blog\/wp-content\/uploads\/2010\/02\/image6.png\"><img title=\"image\" src=\"http:\/\/www.quantumofgeek.com\/blog\/wp-content\/uploads\/2010\/02\/image_thumb4.png\" border=\"0\" alt=\"image\" \/><\/a><\/p>\n<p>3. Add your SharePoint server\u2019s fully qualified domain name. In my case, I chose to use an asterisk as a wildcard (*.companyname.com) to represents all hosts in my local intranet.<\/p>\n<p><em>WARNING: Be very careful when using a wildcard on this setting to ensure your credentials are only used to connect to trusted servers on your \u201cinternal\u201d network and not on the Internet. As an example, you would never want to use *companyname.com which can be easily spoofed and lead to passing internal domain credentials to a non-trusted external system.<\/em><\/p>\n<p><a href=\"http:\/\/www.quantumofgeek.com\/blog\/wp-content\/uploads\/2010\/02\/image7.png\"><img title=\"image\" src=\"http:\/\/www.quantumofgeek.com\/blog\/wp-content\/uploads\/2010\/02\/image_thumb5.png\" border=\"0\" alt=\"image\" \/><\/a><\/p>\n<p>4. In addition, when back on the Security tab, Click\u00a0<strong>Custom Level<\/strong> and scroll down to the bottom of the Local Intranet Zone settings and ensure \u201cAutomatic logon only in Intranet zone\u201d is checked.<\/p>\n<p><a href=\"http:\/\/www.quantumofgeek.com\/blog\/wp-content\/uploads\/2010\/02\/image8.png\"><img title=\"image\" src=\"http:\/\/www.quantumofgeek.com\/blog\/wp-content\/uploads\/2010\/02\/image_thumb6.png\" border=\"0\" alt=\"image\" \/><\/a><\/p>\n<p>5. Close and re-open your browser. You should no longer be prompted when accessing your local domain\u2019s SharePoint server.<\/p>\n<p>Well, that took care of issue number one but I was still getting prompted when opening an Office 2007 document from a SharePoint Document Repository. However, once the credentials are entered, the prompt goes away\u2026 for a while. Actually, I believe the credentials are simply not cached between logons and return when I access the document repository following logons or reboots. Anyway, this turned out to be due to the fact Microsoft changed the way online documents are accessed via Web Distributed Authoring and Versioning (WebDav). According to\u00a0<a href=\"http:\/\/support.microsoft.com\/kb\/943280\/en-us\" target=\"_blank\" rel=\"noopener noreferrer\">KB 943280<\/a>, a windows Vista Client will be prompted for a username and password under the following conditions:<\/p>\n<ol>\n<li>A proxy server is not configured in Internet Explorer<\/li>\n<li>WebDav is used to access a fully qualified domain name site<\/li>\n<\/ol>\n<p>Well, I can tell you that I did not have a proxy server configured and my SharePoint document repository was certainly a WebDav site accessed via FQDN<\/p>\n<p>Although the KB article is meant for Vista, Windows 7 is essentially Vista version 2 so I figured it would hold the key. However, the hotfix listed in the article would not be applicable as it was included way back with Vista SP1 anyway and Windows 7 was bound to include that functionality.<\/p>\n<p>Anyway, the fix for this is as follows:<\/p>\n<p>1. Open Registry Editor to: HKLMSYSTEMCurrentControlSetServicesWebClientParameters<\/p>\n<p>2. Add a new key using Multi-String Value<\/p>\n<p>3. Enter AuthForwardServerList\u00a0 for the new key name<\/p>\n<p>4. Edit the new key and enter the FQDN of the SharePoint or WebDav Server.<\/p>\n<p>(In my case, I used *.companyname.com again. )<\/p>\n<p>5. Close Registry editor, go to services in Computer Management and restart the WebClient service.<\/p>\n<p>Alternatively, you can simply open a command prompt with elevated permissions and enter the following line (edited with your server info of course):<\/p>\n<p><em>reg add HKLMSYSTEMCurrentControlSetServicesWebClientParameters \/v AuthForwardServerList \/t REG_MULTI_SZ \/d *.companyname.com<\/em><\/p>\n<p>You can restart WebClient in the same command prompt, type: Net Stop WebClient &amp;&amp; Net Start WebClient<\/p>\n<p>That\u2019s it, seamless passthrough authentication to SharePoint!<\/p>\n<p><strong>Reference<\/strong>:\u00a0<a title=\"http:\/\/support.microsoft.com\/kb\/943280\/en-us\" href=\"http:\/\/support.microsoft.com\/kb\/943280\/en-us\">http:\/\/support.microsoft.com\/kb\/943280\/en-us<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u2019m still enjoying the experience as a new Windows 7 user. However, one of the problems I ran into recently was the repeated and constant prompting for username and password when accessing a document in my SharePoint repository. Actually, I was getting prompted twice despite the fact the SharePoint server is on my local network [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[5,1],"tags":[],"_links":{"self":[{"href":"http:\/\/obieta.com\/index.php?rest_route=\/wp\/v2\/posts\/1525"}],"collection":[{"href":"http:\/\/obieta.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/obieta.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/obieta.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/obieta.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1525"}],"version-history":[{"count":0,"href":"http:\/\/obieta.com\/index.php?rest_route=\/wp\/v2\/posts\/1525\/revisions"}],"wp:attachment":[{"href":"http:\/\/obieta.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1525"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/obieta.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1525"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/obieta.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1525"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}