Windows Authentication not working in IIS after adding Bindings.

Question

I have a working website on current server that is in same domain where users are.
eg: serverName01.abc.com and website is website1.abc.com

now we are migrating the website to a new server this server is part of another domain but there is trust enabled b/w domains.

servername02.xyz.com and website name also will change to website2.xyz.com

the users are all still in abc\user1

Website is using windows authentication which works fine if I browse the website as http://localhost:80 (or some other port as well)

when I add website name as binding windows authentications stops.

I tried some solutions which require creating a multi-string value key named BackConnectionHostNames in regedit.
if i put in the website name it started working.... but stoped after a while (next day)... i again deleted and re created that key in regedit which again worked but stopped after a while.

is there a permanent solution to this please help.

Answer 1

I was able to resolve this by adding BackConnectionHostNames

Method 1: Disable the loopback check

Follow these steps:

1. Click Start, click Run, type regedit, and then click OK.
2. In Registry Editor, locate and then click the following registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

1. Right-click Lsa, point to New, and then click DWORD Value.
2. Type DisableLoopbackCheck, and then press ENTER.
3. Right-click DisableLoopbackCheck, and then click Modify.
4. In the Value data box, type 1, and then click OK.
5. Quit Registry Editor, and then restart your computer.

Method 2: Specify host names

To specify the host names that are mapped to the loopback address and can connect to Web sites on your computer, follow these steps:

1. Click Start, click Run, type regedit, and then click OK.
2. In Registry Editor, locate and then click the following registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0

1. Right-click MSV1_0, point to New, and then click Multi-String Value.
2. Type BackConnectionHostNames, and then press ENTER.
3. Right-click BackConnectionHostNames, and then click Modify.
4. In the Value data box, type the host name or the host names for the sites that are on the local computer, and then click OK.
5. Quit Registry Editor, and then restart the IISAdmin service.

Full reference : https://www.betaarchive.com/wiki/index.php/Microsoft_KB_Archive/896861

Answer 2

When you were trying on http://localhost - it was working as it was using the local admin credentials and you were logged in with admin rights.
Moving away from windows authentication and using basic authentication should help and resolve this. Ideally, later you may give a thought on security part.