Client can't login to my SSL site when using win7 when domain member

[scravitz2011]

I run an SSL site that has function perfectly for over 10 years. Now that clients are using Windows 7 SOME of them cannot log in because their LOCAL domain name is part of the USERNAME ... i.e. LOCALDOMAN\USERNAME ... they cannot change it ... they cannot use the User another account setting after using it 1 time.

I have had them remove the autocomplete option under tools, content, ssl, username/password.

i have had them clear the SSL state.

It seems to only happen with Windows 7 pro when they have their own domain set up at their office.

Thanks!

Steve

 

[WebMattR]

Wouldn't they need to be a part of your domain for this to work?

 

[scravitz2011]

no ... they sign on with username only. they ARE in my activedirectory as users if that's what you mean.

 

[WebMattR]

Right. So, they're authenticating to your domain using the accounts that you created for them, correct?

Perhaps try having them log in as yourdomain\username ?

 

[scravitz2011]

correct!

however, i've tried that solution. if they click "use another account' and prefix with my doman name they cannot connect and never have been able to even from XP. With Windows 7 their local domain name is automatically added as a prefix in GREY ... i.e. they cannot remove it or overwrite it.

 

[WebMattR]

So, they were previously connecting to your domain with the accounts from their local domain? Do you have a trust in place between the two, or how did you rig that to work?

(sorry, I'm half trying to help, half trying to make sure I understand what I'm helping with)

 

[scravitz2011]

i've never had to create a trust ... this is a simple internet connection. they enter their username and password (that i have given them by setting up a user account in active directory). they login and then can get their secure data from my site ... i don[t know how else to explain it ... it just worked like it should have worked for many years ... now it doesn't with win 7!

 

[WebMattR]

Okay. Well, then I'll guess that isn't the issue. In that case, I've a different question. Is it consistent? Are the same people inable to access it, or does who it is that can/can't change day to day or some such?

 

[scravitz2011]

it's only SOME clients! most of them who use windows 7 can simply click 'use another account', put in their username and password and voila! so it MUST be a setting on the client computer, probably a security setting and i just cannot determine what setting it is!

 

[WebMattR]

it's only SOME clients!

I understand. I meant is it consistently the same clients? For example: Bob and Joe from Company A can't ever get in, but Jim from Company B can, and they're all running Windows 7.

I'd be willing to bet it's a security/auto-fill setting somewhere in their internal domain policy. Probably W7 is picking it up and using it, where as XP previously ignored it (I've seen it happen, as stupid as that sounds).