Hi Zhao, Thank you for your reply. I now understand how [AlwaysAllowedUrls] works and where the query string check is still performed on the allowed Urls. To clarify, here is what I would like to achieve. For instance, I would like the following 'url+query string' to be valid: http://www.domain...

Internet explorer caches password for domains and once user changes their password, IE won't release the password from the cache and user will be prompted for username and password and will not be able to get through the prompt. Go to Control Panel on affected machine, select User Accounts, go to...