Search code examples
asp.netwindowsiiswindows-authentication

Windows Authentication working on localhost but not on other site on IIS


I'm trying to set up a simple html/css/js only site on my local IIS that uses Windows Authentication.

So far I just a have a c://mysite/index.html file

When I point the default IIS website (i.e http://localhost) to this folder and enable Windows Authentication, I am shown the login dialog when I browse to it. When I enter my creds it then shows the index.html fine. But when I setup a new IIS site (e.g http://local.mysite I have a host entry for this) pointing to the same folder, with Windows Authentication enabled, I cannot get passed the login dialog. It just redisplays as if the login creds were wrong, but I'm entering the same creds as I did in http://localhost.

I have added http://local.mysite to the local intranet zone in Internet Options, but this doesn't resolve the issue. I have also set the application pool of local.mysite to be the same as localhost

Any ideas on why this isn't working?


Solution

  • Finally found the answer.
    Issue is the loopback check security feature that's in Windows.

    Fix for this can be found here https://support2.microsoft.com/default.aspx?scid=kb;en-us;896861support2.microsoft.com/default.aspx?scid=kb;en-us;896861