Here’s the background: I love using fully qualified domain names (FQDN) for my IIS sites when doing some sweet EPiServer-development. Like this: local.<customer>.website.
Like so in Visual Studio:
But I ran into a problem with the IIS when using Integrated Windows authentication and authentication mode Windows. I got a “You are not authorized to view this page” in Internet Explorer, but it works fine in FireFox! Wtf, mate?
This drove me nuts.
I checked and double-checked that this URL was among my trusted sites in IE. It was.
Then I stumbled upon an article at http://support.microsoft.com which described this problem.
What happens is that when a site is hosted in IIS 5.1 or later version, is local and you use a FQDN to reach it, then this triggers a loopback in IE.
Here’s how you fix it:
- Click Start->Run and type regedit, then hit that sweet OK-button.
- Locate the following key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa.
- Right click it, click new and then DWORD Value.
- Type DisableLoopbackCheck and then hit enter.
- Right-click the newly entered DisableLoopbackCheck key and click modify.
- In the Value data box, type 1, and then click OK.
- Reboot the computer and you should be good to go!
Here’s the link to the full article at Microsoft: http://support.microsoft.com/default.aspx/kb/896861