How to use NT Authentication with an existing corporate NT domain

error '80070035' 
The network path was not found. 

Microsoft VBScript runtime error '800a01b6' 

Object doesn't support this property or method: 'strNTUserInfo.Groups' 

/3/inc_functions.asp, line 1265 

quote:

---

Earl could you help me with this:

I changed as you advised the getobject string so I could use domain authentication. But I've got some strange beheviour. What I did so far:

I use W2K Server with IIS 5.0 & AD installed. Snitz Forums 3.303 with SQL Server 7. I can manage the server myself by using VPN Terminal Services.
Keep up with the patches, my friend. I heard there were some nasties out there that target terminal services's weaknesses.
I've set "Basic Athentication (password sent in clear text)" in IIS by using the default domain wich is configured with AD. I made some users and groups with AD Users and Computers. When a user logon with Administrator rights he/she can logon to the forum from the internet but when it's a member without administrator rights it can't logon. They get a HTTP 401.1 - Unauthorized: Logon Failed
Internet Information Services Error.
This is an obvious permissions issue. Check that these users belong to a single group, such as EXTRANETUSERS or something like that. AND, that the user belongs to the USERS or DOMAIN USERS group (or something like that). Then make sure that this group has read permissions to the entire forums directory and files, with windows explorer. Go back to each of the admin files and change their permissions to allow only administrator permissions. IIS5 should be good about recognizing your new permissions changes in Win2K.

I had this same error happen today in NT4/IIS4 to a single user. And, I couldn't find the solution. So, I blew away the user's account and created a new one. Magically, it worked. Go figure.


When I logon as a normal user with Administrator rights once AFter the first time I doný need any Administrator rights.
This is a very good symptom that your users lack read permissions to some files in the forum's file directory.

So it's only the first time they logon that they need admininistrator rights. How Come... What Am I doing wrong here???
If your user logs in as an administrator for the first time because you made that user a member of the administrator's group, then obviously that user had full permissions to all the files used by Snitz forums. Then, if you change the user's rights from administrator to regular user or domain user (or something like that) and the user is able to move around, then it sounds like the user didn't have permissions to read one of the files used in the "first-time an authorized user visit's the forums" process. Check your permissions on forums files, as mentioned above.



It worked with NTLM instead of Basic but then people from behind a proxy server couldn't logon. So I changed the inc_functions and config.asp as you said. Works great so far for Administrators.
Authentication must work from behind a proxy server.
Hmmm. Don't know nuttin' about Proxy Server. Your input on this would be a welcome addition to the NT Howto. Check the value that's stored in strNTUser. I wonder if the domainame is being passed under varying user-access conditions into strNTUser in inc_functions.asp. I wonder if the Proxy Server is acting as a client to the webserver and passing user login credentials differently than an external user.

Regards Randy
<snip>

---

The server was unable to logon the Windows NT account 'testuser' due to the following error:
Logon failure: the user has not been granted the requested logon type at this computer.
The data is the error code.

Start
Programs
Administrative Tools
Domain Controller security Policy
Local Policies
User Rights assignment
Log On Locally