URL For _AuthChangeUrl Is Incorrect When Connecting Via Proxy Server

• Microsoft Internet Information Server version 4.0
• Microsoft Proxy Server version 2.0
• Microsoft Windows NT Server version 4.0, Terminal Server Edition

SYMPTOMS

An incorrect URL is generated when the password change feature in Microsoft Internet Information Server (IIS) version 4.0 is initiated.

For example, the following error is displayed in Internet Explorer 4.0 when you attempt to connect to an Internet site through Microsoft Proxy Server 2.0:

Internet Explorer cannot open the internet site

https://www.microsoft.com/_AuthChangeUrl?http://www.microsoft.com /scripts/proxy/w3proxy.dll?0307a008

CAUSE

When you use IIS 4.0 with NTLM authentication, if IIS detects an expired Windows NT user password, it gives you the option to change the expired NT account password.

NTLM authentication is being used on the computer running IIS where Microsoft Proxy Server 2.0 exists, and the Windows NT user account password has expired. (In User Manager, the "User must change password at next login" option is set for the particular user.) The password change URL is generated by looking at the URL that is being accessed. In this case, when the proxy itself requires authorization, IIS generates the wrong URL by pulling www.microsoft.com out of the URL that the client is trying to access.

RESOLUTION

To resolve this problem, obtain the latest service pack for Windows NT 4.0 or Windows NT Server 4.0, Terminal Server Edition. For additional information, please see the following article in the Microsoft Knowledge Base:

Q152734 How to Obtain the Latest Windows NT 4.0 Service Pack

STATUS

Microsoft has confirmed this to be a problem in Windows NT 4.0 and Windows NT Server 4.0, Terminal Server Edition. This problem was first corrected in Windows NT 4.0 Service Pack 4.0 and Windows NT Server 4.0, Terminal Server Edition Service Pack 4.

MORE INFORMATION

Either SSL is required on the Proxy Server (recommended) or non-secure password changes have to be enabled on the Proxy Server (not recommended) in order for the password to be changed successfully in this environment.

Please see the IIS 4.0 online help for information on setting up SSL or see the PasswordChangeFlags in the IIS 4.0 online help for more configuring information for IIS to allow the changing of the password over a non-secure channel.

Keywords : NT4SP4Fix kbfix4.00.sp4
Version : WINNT:2.0,4.0
Platform : winnt
Issue type : kbbug