Wednesday, February 16, 2011

Receive repeated logon windows - loopback check in Windows Server 2003

It was something which took lots of time and I couldn't find a valid reason or solution for the problem, finally it turned out as a security feature with Windows Server 2003, that is Loopback check.

One of my old .NET web applications was hosted on Windows Server 2000, since Microsoft doesn't support 2000 servers anymore, I had to move my application to 2003 servers. It was a simple web site with windows integrated security. After creating site on new 2003 server, IIS 6, mapping home directory, putting DLLs, components etc in place, tried to browse site from IIS and received repeated logon window, finally ended up with "You are not authorized....". Tried opening the site in browser (IE) on web server, again same problem. Then on other machine in same network, tried opening the site; no problem, site opened successfully with my windows credentials, it was a great relief. :)

So, the problem was- i was not able to open the site from host machine but it was opening perfectly on any other machine. Tried many tricks; adding to trusted site, intranet zone..etc.. but nothing worked. Finally, after searching lots of article, reading many MSDN pages, found the MS KB for this.

There is a security feature with Windows Server 2003 SP1, named loopback check functionality. By default, loopback check functionality is turned on in Windows Server. This cause repeated Login Windows receive. The solution is simple, go in system registry and disable it.

The loopback check functionality is stored in the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\DisableLoopbackCheck

Here is the KB link for details on reason and solution:
http://support.microsoft.com/kb/926642

Hope it works for you..
Cheers!!!!

No comments:

Post a Comment