Question

I am having difficulties authenticating a HttpWebRequest to a webserver. The response I am receiving is simply a 401. I’ve made sure I set the credentials correctly on the C# side, and IIS is correctly set to allow NTLM authentication. I don’t know if this matters, but he computer is not on the same domain as the the web server.

I am sure the user/pass is correct but are there any other authorization settings needed to configure on the user?

If I enable Basic authentication, and disable Windows Authentication, the request works perfectly (with the correct C# code changes of course).

What am I missing?

    webRequest.UseDefaultCredentials = false;
    webRequest.PreAuthenticate = true;
    var c = new NetworkCredential("User", "password", "domain");

    CredentialCache credentialCache = new CredentialCache();
    credentialCache.Add(new Uri(Url), "NTLM", c);
    webRequest.Credentials = credentialCache;

Heres a snapshot of my settings in IIS.

Failed Request Tracing:

Answer 1

With the help of a colleague, we were able to determine something was wrong in the way Windows was dealing with the authentication. Looks like a setting in the Local Security was wrong. Changing Local Policies > Security Options > Network access: Sharing and security model for local accounts from Guest only – local users authenticate as Guest to Classic fixed the problem.