IIS 5 & IIS 6
Username/password prompt when downloading a Word 2007 document (Vista...
Last post Sep 06, 2012 07:58 PM by jmicwatkins
Nov 29, 2007 09:47 PM|canamgroup|LINK
I have a weird problem with some users having Windows Vista and Office Word 2007.
First of all, our Intranet uses IIS and its Integrated Windows Authentication feature to avoid users to logon each time. Everything works fine except when those users click on a word document using Internet Explorer. They are then prompted for a username/password.
Even if they enter their credentials, the login window will be displayed again. If they click on cancel on that same window, the .doc file is opened correctly inside Word 2007.
By looking around, I found those two pages that are somewhat related to my problem:
Unfortunately, it didn't solve my problem.
If I remove the Integrated Windows Authentication feature, then everything works as expected. It works fine too when the .doc file is opened directly into Internet Explorer. Finally, so far, only the Vista and Word 2007 setup causes this problem.
Can someone help?
Jun 20, 2008 01:10 PM|Mr. T-REX|LINK
Ever find a solution? We have the exact same issue.
With IE7, Vista and office2003 evenrything is working fine. But with office 2007 we still ghet the logon prompts.
Jun 20, 2008 01:25 PM|tomkmvp|LINK
What version of IIS? What NTFS permissions are on the files/folders? Are you using FrontPage Server Extensions? In the IIS MMC Home Directory tab, do you have "Write" checked?
Jun 20, 2008 01:53 PM|Mr. T-REX|LINK
IIS6, no frontpage. User had write NTFS permissions on the folder. Only read permissions on the homedir of the website (write should not be required).
When I go to a website where i can open a word doc with anonymous access there is no problem.
And it's not IE7 That gives me a logon prompt, but Office 2007. Downloading the files is no problem. The logon box appears after a user chooses "Open" from the Open/Save/Cancel dialog box.
Adding the site to trusted sites makes no difference.
Jun 20, 2008 07:14 PM|tomkmvp|LINK
We made need someone from Microsoft to step in here. It's interesting that this has always caused some type of issue throughout each version of Office/IE/IIS ...
I've pinged my contacts to see what we can figure out.
Jun 21, 2008 02:41 PM|Mr. T-REX|LINK
If more details are required, do not hesitate to ask.
Jun 24, 2008 01:32 PM|Mr. T-REX|LINK
Some extra info: I did some tracing with network monitor, and found a difference between the HTTP CONNECT requests that are made when opening the document:
The first HTTP CONNECT request is done with UserAgent: Microsoft-WebDAV-MiniRedir/6.0.6001, and results in a logon prompt.
After clicking Cancel, there is a new HTTP CONNECT request with UserAgent: Microsoft Office Existence Discovery, wich then opens the file with no problem.
When i try to open the file by entering the Weblocation (https://<portalurl>/<dir>/<document>.doc in the File/Open dialog box, I see that only The
Microsoft-WebDAV-MiniRedir/6.0.6001 User agent is used (and the document fails to open).
Seems to be some sort of webdav problem, but I do not know where to go from here...
Jun 26, 2008 12:57 PM|Mr. T-REX|LINK
Found some more interesting info:
According to http://support.microsoft.com/?id=943280 The intranet site should be added to
Because the WebDav (winhttp) client does not use the IE7 zone settings and therefore it will not pass credentials to anything other than local server names.
The registry fix did not work for me. Could it be that Webdav passes on the credetials I used to log on to my Vista laptop rather than the credetials entered in the webbrowser? This solution still has to be tested on the internal network.
I also found two workarounds, wich prevent Office2007 to use WebDav to access the files:
1) Run Office 2007 in WinXP SP2 Compatibility mode (as per http://blogs.msdn.com/sharepoint/archive/2007/10/19/known-issue-office-2007-on-windows-vista-prompts-for-user-credentials-when-opening-documents-in-a-sharepoint-2007-site.aspx )
2) Stop the Webclient servive under the services MMC snapin, wich disables WebDaV alltogether (so this will not be a suiteble solution for most).
Jul 03, 2008 02:08 PM|canamgroup|LINK
The Microsoft TechNote (modifying the registry) did it for me!
Thanks a lot!
Apr 02, 2012 10:10 PM|jwillj2k4|LINK
Apr 09, 2012 01:43 PM|rapidsslonline|LINK
Sep 06, 2012 07:58 PM|jmicwatkins|LINK
I'm running into an identical issue as Mr. Trex has described but it only seems to happen on Windows 7 machines joined to my domain. Windows 7 off the domain doesn't prompt for password and Windows XP on or off the domain don't prompt either. Any thoughts
on why the combo of Windows 7 + Domain are resulting in "The first HTTP CONNECT request is done with UserAgent: Microsoft-WebDAV-MiniRedir/6.0.6001, and results in a logon prompt." ?