I think this is an XP problem, but it has us completely puzzled. Occasionally, after a user changes his/her password, later that day or the next day they will be prompted for their username/password when trying to access our Intranet.
A little background: This problem has been happening for about a year-and-a-half. We previously were in a Windows 2000 Native-mode domain, with the IIS server being Windows 2000. IIS was set to use only Integrated Windows Authentication, no anonymous access. The Intranet was moved earlier this year to a Windows Server 2003 machine (still no anonymous acces), and the problem still occured. We now have 2 (out of 8) DCs that are Windows Server 2003, with the domain still in Windows 2000 Native-mode, and the problem has happened again today. This has happened only on XP machines, but it has been both XP Gold and XP SP1 machines, using Internet Explorer (we don't support any other browsers internally). The users have included ones that have been set up since our domain was NT 4, as well as accounts created within the last year. Roughly 20 users so far (out of about 650 using XP) have experienced this.
The symptoms: A user will change his domain password (due to password expiration). He may be able to access the Intranet just fine immediately after the change. However, at sometime within the next couple of days, when he tries to access the Intranet he will be prompted for his username and password. The prompt displays the username as server\username instead of domain\username. If we have the user change the username to domain\username and then supply his domain password, he can access the Intranet until the next time he closes IE and starts it again, at which time he will again be prompted for credentials.
The problem evetually goes away within the next one or two password changes. We have tried deleting all cookies, clearing out history, clearing out temporary cache, clearing out all AutoComplete entries, and ensuring that "Enable Integrated Windows Authentication" in IE is turned on (on some users it was, on some it wasn't; on the ones that didn't have it turned on, turning it on did not immediately fix the problem). None of that made any difference. The users never have a problem logging on to the domain after the password change. They can access network resources and e-mail just fine. I haven't found anything in MS's KB that might fix the problem (looked under both XP and IIS KBs).
I know this is very few users, but it's frustrating for them to put in their username/password for several weeks just to access the Intranet. It's frustrating for us because we haven't been able to find a solution.
Any help would be greatly appreciated!
A little background: This problem has been happening for about a year-and-a-half. We previously were in a Windows 2000 Native-mode domain, with the IIS server being Windows 2000. IIS was set to use only Integrated Windows Authentication, no anonymous access. The Intranet was moved earlier this year to a Windows Server 2003 machine (still no anonymous acces), and the problem still occured. We now have 2 (out of 8) DCs that are Windows Server 2003, with the domain still in Windows 2000 Native-mode, and the problem has happened again today. This has happened only on XP machines, but it has been both XP Gold and XP SP1 machines, using Internet Explorer (we don't support any other browsers internally). The users have included ones that have been set up since our domain was NT 4, as well as accounts created within the last year. Roughly 20 users so far (out of about 650 using XP) have experienced this.
The symptoms: A user will change his domain password (due to password expiration). He may be able to access the Intranet just fine immediately after the change. However, at sometime within the next couple of days, when he tries to access the Intranet he will be prompted for his username and password. The prompt displays the username as server\username instead of domain\username. If we have the user change the username to domain\username and then supply his domain password, he can access the Intranet until the next time he closes IE and starts it again, at which time he will again be prompted for credentials.
The problem evetually goes away within the next one or two password changes. We have tried deleting all cookies, clearing out history, clearing out temporary cache, clearing out all AutoComplete entries, and ensuring that "Enable Integrated Windows Authentication" in IE is turned on (on some users it was, on some it wasn't; on the ones that didn't have it turned on, turning it on did not immediately fix the problem). None of that made any difference. The users never have a problem logging on to the domain after the password change. They can access network resources and e-mail just fine. I haven't found anything in MS's KB that might fix the problem (looked under both XP and IIS KBs).
I know this is very few users, but it's frustrating for them to put in their username/password for several weeks just to access the Intranet. It's frustrating for us because we haven't been able to find a solution.
Any help would be greatly appreciated!