MOSS 2007 and the Local Intranet Zone

Aren't logon popup boxes annoying? Especially when you're browsing on your intranet MOSS 2007 sites? Oh common, I'm connected to the corporate network, I'm logged in to the corporate Active Directory and still I'm getting logon boxes...

Basically, this is Internet Explorer security fucking with you.
More specific: if you use a nice URL (e.g. http://portal.trycatch.be), that doesn't match your domain name (e.g. catchthis.local), then it's possible that your Internet Explorer recognizes your MOSS portal as an "Internet Site".

If you go check out your Security Settings for the Internet zone in the Internet Options (Security tab) of IE, you'll see at the bottom:
Authentication -> Automatic logon only in Intranet zone.

So, how do we do this? Two options:

  1. You add manually your site to the Local Intranet zone, and thus providing automatic logon (with the credentials of your Windows session)
  2. You add a group policy in Active Directory so that your MOSS site is added to everyone's Intranet zone

Of course, the second option is the way to go.

At our company, they added in the Local Intranet zone the following entry (by group policy): *.company.com
This way, all subdomains from company.com is recognized as a Local Intranet site.

BE GONE logon boxes

Grtz
Tom

 

Published Thursday, April 16, 2009 9:00 PM by Tom Vandaele
Powered by Community Server (Commercial Edition), by Telligent Systems