How To... Enable Windows Authentication on Windows 2008 After Installing Vault Server

Problem

You would like to know how to enable Windows Authentication on Microsoft Windows Server 2008.

Solution

1) Open Server Manager in Windows 2008 by right-click on My Computer>Manage; expand Roles, select Add Role Service upon r-clicking on Web Server (IIS).  Then press install after checking Windows Authentication role.

NOTE: For Windows 7, go to Control Panel > Programs and Features, select Turn Windows features on or off > check ‘Windows Authentication’ option under Internet Information Services > World Wide Web Services > Security.

2) While still in Server Manager, expand Web Server (IIS), click on IIS Manager, and navigate through to MachineName>Sites>Default Web Site>AutodeskDM>Services.  Under Services there will be a WInAuth directory;

NOTE: WinAuth is the only tree node that would need Windows Authentication enabled.  It is not necessary to enable WinAuth on Default Web Site or AutodeskDM directories.

3) Double click WinAuth’s Authentication feature and ensure Windows Authentication is the *only* Enabled authentication; right-click and select Enable if otherwise.  NOTE: must ensure that *both* Anonymous Authentication as well as ASP.NET Impersonation are DISABLED.

4) Open a CMD prompt and execute the following commands (no quotes); if your website is other than ‘Default Web Site’, make the replacement prior to running each command:

1. “C:\Windows\System32\inetsrv\appcmd.exe set config "Default Web Site/AutodeskDM/Services/WinAuth" -section:system.webServer/security/authentication/windowsAuthentication /+"providers.[value='Negotiate']" /commit:apphost”
2. “C:\Windows\System32\inetsrv\appcmd.exe set config "Default Web Site/AutodeskDM/Services/WinAuth" -section:system.webServer/security/authentication/windowsAuthentication /+"providers.[value='NTLM']" /commit:apphost”

5) In Internet Explorer, set web browser security settings to automatic logon with current user name and password