Protocol: The IIS 6.0 (Integrated Windows Authentication)
October 29th 2007
For all the reasons in the world (wide web) sometimes we have the need to prove that you are actually you. Sometimes you are prompted for a username and a password to prove who you are (Like in the basic Authentication Protocol that I’ll write more about it later). The Integrated Windows authentication does not initially prompt for a user name and password (It’s more clever than that
). It uses the current Windows user information on the client for the authentication. If the authentication exchange initially fails to authorize the user, Internet Explorer prompts the user for a Windows account user name and password, which it processes using Integrated Windows authentication. Internet Explorer prompts the user for the correct user name and password up to three times. If, however, the user has logged on to the local computer as a domain user, then no authentication is required when the user accesses a network computer in that domain.
Does this sound familiar to you? Yes, it is the NTLM protocol, and also known as Windows NT Challenge/Response authentication and you can find great info about it here.
Please, let me know if you need more info about this





