Project IIS 6.0 Security & Authentication Settings

[Leah]

I have installed Project Server 2003, SharePoint Services, Sql Server 2000
and Sql Server Analysis server on one Windows 2003 server..

I have fooled around with the Anonymous permissions on the Default web as
well as the Projectserver virtual directory..

The problem I'm having is we want to use a mixed mode authentication
enivornment for logging onto the Project Server through Project Web Access
and we have that set correctly on Project.. If a user has not logged into
the computer with a valid domain acocunt when he puts in the project server
url the login page it prompts him for a domain account, if he is not using a
domain account but has a project server account he will never get to the
login page because it's requesting a domain account just to display the
logon page. It then errors with a HTTP 401.2 Unauthorized Access Error..

I want the project server web access to pass through a domain account user
and open up Project Web Access which it is doing. I also want Project
Server to come back to the login page if that user is not logged onto a
computer that is not part of the domain and has no valid domain account
username in Project.

I also noticed that when we turn on anonymous access on the projectserver
virtual directory that the logon page appears correctly but will only accept
project server accounts and not windows domain accounts even though, those
accounts have been added manually into project server.

I have set the anonymous access on the pjdbcomm.dll inside of the isapi
directory under Project Server.. I have also set the Project Server Virtual
directory and under the msadc, the msadcs.dll to basic authentication as
well as Integrated as suggested.

Projectserver virtual directory is under the default directory on the web
site.. we are using a host header name as well on the default web site.

I think I may have gotten the settings inside of IIS 6.0 misconfigured.. I
can't find a good security settings or authentication document for Project
2003 Server..

I would really appreciate anyone's help with this.

Leah

 

[Gary L. Chefetz \(MVP\)]

Leah:

For your situation you need to enable both Windows authentication and
Anonymous access on the Project Web site. Users hitting the site who are
already logged into the domain and have Windows authenticated accounts in
Project Server should never see a logon screen. The system should bring them
directly to their home page. Project Server authenticated accounts should be
the only users who see the logon.

--

Gary L. Chefetz, MVP
"We wrote the book on Project Server
http://www.msprojectexperts

-

 

[Joseph Wallis]

Interesting, I have these settings enabled, and it works for most of my
users, but I have one user, who is logged into a valid domain account, that
it does not do windows authentication for. All my other users can get in
just fine. Have you ever seen this phenomenon before?