Login Using a Different Windows User Account Fails

  • Thread starter Network Auto Discovery - Fluke Networks
  • Start date
N

Network Auto Discovery - Fluke Networks

MPs,

Please help. I am not able to log on using a different windows user account

I have done the following

1. Enable Basic authentication for the Project Server virtual directory and
for the Remote Data Services ISAPI Library (Msadcs.dll) using the Microsoft
Management Console (MMC) snap-in for Internet Information Services (IIS).

Both Integrated Windows Authentication and Basic Authentication are selected.

thanks

Walt
 
N

Network Auto Discovery - Fluke Networks

No. I am not using HTTPS:\\ Have no need for a certificate. The PWA is
only rolled out on our intranet.

I followed the directions below: Thanks Walt


I am using Integrated Windows Authentication (IWA). Users are able to access
Project Web Access, as long as they want to logon to PWA as the user that is
logged in to the workstation.

However, if the user wants to logon using a Windows account that differs
from the account the workstation is logged in to the network with, a dialog
box appears stating that :

"You are not currently using Secure Sockets Layer (SSL). This functionality
is only available when the https://protocal is used to connect to the server.
Make sure that your Project Server is set up to use SSL and that you are
connecting to the server using the https://protocol"

The Microsoft Office Project Server 2003 Installation Guide (Page 118) seems
to suggest that SSL is not required but can be used for greater Security. See
Step 2 below.

Allow Users to Log on Using a Different Windows User Account

By default, when Project Server attempts to authenticate a user with Windows
authentication, it assumes that the user is using a computer where he or she
has already logged on to the network using a Windows user account (Integrated
Windows authentication). However, this may not always be the case. For
example, a user may want to check Project Server information from someone
else's computer or by using a common computer that is shared by several
people and where the user has not logged on with his or her Windows user
account.

In this case, when the user goes to a Project Server site, the Logon page
opens instead of the Home page. The user must then click the Log on using a
different Microsoft Windows user account link on the left side of the page.
After entering his or her Windows user account information, the user is
authenticated using Basic authentication and is then taken to the Home page.

However, to enable users to use the Log on using a different Microsoft
Windows user account link on the Logon page, the administrator must perform
the following steps on the Project Server computer:

1. Enable Basic authentication for the Project Server virtual directory and
for the Remote Data Services ISAPI Library (Msadcs.dll) using the Microsoft
Management Console (MMC) snap-in for Internet Information Services (IIS).

2. Set up the Secure Sockets Layer (SSL) features of IIS for greater security.
 
R

Reid McTaggart

The instructions you cite say that the administrator must perform boths steps
1 and 2. Have you tried that?
 
G

Gary L. Chefetz [MVP]

For an internal-facing application, you don't want to activate basic
authentication. What you want to do, however, will vary on what options and
limitations that you have. If you're going to use Windows authentication
outside of a domain, you can deploy a single-server using local accounts on
the server instead of domain accounts. This approach leverages Windows
Integrated authentication. If you're not planning on using SharePoint
through Project Web Access, you can also consider using Project Server
authentication.

I hope this gets you pointed in the right direction. Managing Windows
authentication in absence of a domain is a challenge that plays out across
many applications, so at some point this conversation quickly crosses over
into a Windows discussion. Keep in mind that there are groups more focused
on these technologies.




"Network Auto Discovery - Fluke Networks"
 
N

Network Auto Discovery - Fluke Networks

Gary/Reid,

Thank you for your time and expertise.

I am running Windows Share Point Services, so I cannot use Project Server
accounts.

All of my Project Server accounts (except for the Project Server
'Administrator')
are using Windows Authentication (RPHI\wjc-rphi-wbny) we have one Active
Directory Domain , named RPHI.

Are you are stating that in order to use the "Log on using a different
Windows user account" in Project Web Access, I must use the SSL protocol,
even if the PWA application will not be exposed to the Internet?

The SSL protocol requires using a certificate.

IAfter reading the PS Configuration guide, I concluded the SSL could be used
for "greater security" but was not required.

Please let me know if SSL is definitely required.

thanks,

Walt
 
G

Gary L. Chefetz [MVP]

Walt:

You can use Windows integrated authentication for this. You don't need to
enable basic auth, and therefore don't need to enable SSL. Remember that the
Windows client will continue to pass the user's current logon credentials.
You may need adjust your browser settings.




"Network Auto Discovery - Fluke Networks"
 
S

Sudarsan

How do I connect to two different project servers from Microsoft Project? I
have a current MS Project 2002 server, and a test Project 2003 Server. The
Enterprise Options only allows me to use windows authentication, but the
problem is the test project 2003 server is in a different domain, which I am
a member of but am not sure where I would put the credentials in.

Any help is greatly appreciated.
 
Top