Logging in to PWA as different windows user name

[Jonathan]

Everyone-

We had set PWA and Project Server 2003, and windows authentication
works fine when we logged on to the LAN. When going online using SSL,
adn clicking on log on as different Windows user name we get the
following error:

Project cannot log you on automatically using your Windows user
account. You need to change the account in your profile, or contact
your Project Server administrator to check if your Windows user account
exists and is a valid account on the Project Server. (5003)

What is the problem and why can't we log in?

Thanks.

 

[Rolly Perreaux]

Everyone-

We had set PWA and Project Server 2003, and windows authentication
works fine when we logged on to the LAN. When going online using SSL,
adn clicking on log on as different Windows user name we get the
following error:

Project cannot log you on automatically using your Windows user
account. You need to change the account in your profile, or contact
your Project Server administrator to check if your Windows user account
exists and is a valid account on the Project Server. (5003)

What is the problem and why can't we log in?

Thanks.

Hi Jonathan,

Are you logging on to the PWA server using a FQDN (ie,
https://project.domain.com) or a servername? (ie, https://project)

Can you log on to your workstation as the 2nd windows account and log on
to the PWA server?


--
Rolly Perreaux
Project Server Trainer/Consultant

IT Summit Series
Advanced Microsoft Technology Training
http://www.itsummitseries.com

 

[Jonathan]

Rolly-

It is a FQDN. We have windows, basic, and anonyomous authetication set
on all parts of the IIS directory for the site. Would this hinder us as
well..?

 

[Rolly Perreaux]

Rolly-

It is a FQDN. We have windows, basic, and anonyomous authetication set
on all parts of the IIS directory for the site. Would this hinder us as
well..?

Hi Jonathan,

Do you have only Windows Authenticated user accounts in Project Server?
If so, remove basic and anonymous. If not, then only remove basic

Let us know if this works

Good Luck

--
Rolly Perreaux
Project Server Trainer/Consultant

IT Summit Series
Advanced Microsoft Technology Training
http://www.itsummitseries.com

 

[Jonathan]

Rolly-

Initial logon is fine, but when we go to "log on as a different user"
the system just logs me back in as the same windows user that was
logged on before. How can I through that option re-initiate the log-on
process?

 

[Rolly Perreaux]

Rolly-

Initial logon is fine, but when we go to "log on as a different user"
the system just logs me back in as the same windows user that was
logged on before. How can I through that option re-initiate the log-on
process?

Hi Jonathan,

Check the security settings for Internet Explorer to see your settings

From Internet Explorer:
From the menu bar, click on Tools --> Internet Options
From Internet Options window, click Security tab and click Custom Level
From Security Settings window, scroll down to the bottom of page

Change the setting to "Automatic logon only in Intranett Zone"


Also as a troubleshooting measure Try the following steps:
1. Log off your workstation (Windows XP)
2. Log back on to the domain but using the 2nd windows account
3. Launch PWA

Does it log on to PWA using the 2nd windows account credentials?
Try "log on as a different user", but this use your 1st windows account

Can you log on to the PWA server?


--
Rolly Perreaux
Project Server Trainer/Consultant

IT Summit Series
Advanced Microsoft Technology Training
http://www.itsummitseries.com

 

[Jonathan]

Rolly-

I don't even get a login box to log in as someone else, how does that
work?

 

[Rolly Perreaux]

Rolly-

I don't even get a login box to log in as someone else, how does that
work?

Jonathan,

First things first
Can you log on to the LAN as your 2nd Windows User account?

If so, Can you launch PWA?
Does it authenticate against Project Server correctly or Do you get the
PWA Login page?


--
Rolly Perreaux
Project Server Trainer/Consultant

IT Summit Series
Advanced Microsoft Technology Training
http://www.itsummitseries.com

 

[Jonathan]

Rolly-

Logging out I can log into PWA as another AD user. However, like myself
PWA just does not log them in. We have to log in via the windows user
name and password box. it does authenticate correctly. Shouldn't the
user just log right in w/o having to enter the username and password?

 

[Rolly Perreaux]

Rolly-

Logging out I can log into PWA as another AD user. However, like myself
PWA just does not log them in. We have to log in via the windows user
name and password box. it does authenticate correctly. Shouldn't the
user just log right in w/o having to enter the username and password?

It should

But the Internet Explorer security settings could interfere with this.
When you access PWA, which Zone does it say in the bottom right corner
of IE?

Internet
Local intranet
Trusted sites

Once you determine this, go to the security settings for Internet
Explorer:

From the menu bar, click on Tools --> Internet Options
From Internet Options window, click Security tab, click on the Zone that
you determined and then click Custom Level.
From Security Settings window, scroll down to the bottom of page
Change the setting to "Automatic logon with current username and
password"

Let us know what happens


--
Rolly Perreaux
Project Server Trainer/Consultant

IT Summit Series
Advanced Microsoft Technology Training
http://www.itsummitseries.com

 

[Jonathan]

Works properly, it automatically logs me in. But I still can't login as
someone else, how do we fix that..?

 

[Rolly Perreaux]

Works properly, it automatically logs me in. But I still can't login as
someone else, how do we fix that..?

What IE Security Zone does PWA belong to?

--
Rolly Perreaux
Project Server Trainer/Consultant

IT Summit Series
Advanced Microsoft Technology Training
http://www.itsummitseries.com

 

[Jonathan]

Local Internet..

 

[Brian K - Project MVP]

Local Internet..

What happens if you put it in the Trusted Sites zone? (That is where it
should be by the way)

 

[Jonathan]

Brian -

I moved it into a trusted sites zone, and I log in perfectly, but when
I go to log on as a different user, the sytem just re-logs me in. I do
not get the ability to log in as someone else, as the link says.

 

[Brian K - Project MVP]

Brian -

I moved it into a trusted sites zone, and I log in perfectly, but when
I go to log on as a different user, the sytem just re-logs me in. I do
not get the ability to log in as someone else, as the link says.

Download this guide:
http://www.microsoft.com/downloads/...E3-0478-4AC3-A230-C4F2D82096C1&displaylang=en

And find the topic called: "Enable Users to Log on By Using a Different
Windows User Account" in Chapter 8 of the document (The installation guide"

you have to do some things like enabling basic auth for the isapi and the
project server root dir as well as ensuring that SSL is setup (but I think
you have that one done already from what you have said)

Anyway the section in this guide walks you through it step by step.

 

[Jonathan]

I made sure that I followed this section in the guide, that's whats
driving me crazy..the fact that it does not work right.

 

[Brian K - Project MVP]

I made sure that I followed this section in the guide, that's whats
driving me crazy..the fact that it does not work right.

At this point it might be worth a call to MS tech support. Sorry

 

[Jonathan]

Thanks Brian-

at this point I will just tell users to log off the web site and re
start IE. Thanks for your help everyone.