Symptoms

Consider the following scenario:

  • On a Windows Vista-based or Windows Server 2008-based computer, you configure a proxy server in Windows Internet Explorer.

  • You use the Web Distributed Authoring and Versioning (WebDav) protocol to access a Microsoft Office SharePoint Server site.

In this scenario, you are prompted unexpectedly to enter your credentials three times. However, you expect that you can access the site directly.

For example, you are prompted to enter your credentials three times when the following conditions are true:

  • You open a Microsoft Office file from a SharePoint Server site.

  • To open the file, you use a 2007 Microsoft Office system program on a Windows Vista-based client computer that has a proxy server configured.

Notes

Cause

In Windows Vista, Internet Explorer uses the Web Client service when you use Internet Explorer to access a WebDAV resource. The Web Client service uses Windows HTTP Services (WinHTTP) to perform network I/O operations with the remote host. However, WinHTTP does not send user credentials to the SharePoint Server site when the client accesses the SharePoint Server site through a proxy. Therefore, the SharePoint Server site prompts for user credentials.

Resolution

A hotfix is available to resolve this issue. After you apply this hotfix, you have to create a registry entry that is named "AuthForwardServerList." For more information, see the "Registry information" section.

Hotfix information

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=supportNote The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Important Windows Vista and Windows Server 2008 hotfixes are included in the same packages. However, only one of these products may be listed on the “Hotfix Request” page. To request the hotfix package that applies to both Windows Vista and Windows Server 2008, just select the product that is listed on the page.

Prerequisites

To apply this hotfix, the computer must run one of the following:

  • Windows Vista

  • Windows Vista Service Pack 1

  • Windows Server 2008

Restart requirement

You have to restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any other previously released hotfixes.

Registry information

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:

322756 How to back up and restore the registry in WindowsTo enable this hotfix, follow these steps:

  1. Click Start, type
    regedit in the Start Search box, and then press ENTER.

  2. Locate and then click the following registry subkey:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WebClient\Parameters

  3. On the Edit menu, point to
    New, and then click Multi-String Value.

  4. Type AuthForwardServerList, and then press ENTER.

  5. On the Edit menu, click
    Modify.

  6. In the Value data box, type the URL of the SharePoint Server site, and then click OK.
    Note You can also type a list of URLs in the Value data box. For more information, see the "Sample URL list" section in this article.

  7. Exit Registry Editor.

After this registry entry is created, the Web Client service reads the entry value. If the client computer tries to access a URL that matches any of the expressions in the list, the user credentials are sent to authenticate the user, and the user is not prompted for the credentials.

Notes

  • You must restart the Web Client service after you modify the registry.

  • You can apply the registry change on any later Windows Operating System as well (no specific hotfix is required there, just the registry modification).

Sample URL list

The following is a sample URL list:

https://*.Contoso.com
http://*.dns.live.com
*.microsoft.com
https://172.169.4.6

This URL list enables the Web Client service to send credentials through the following channels:

  • Any encrypted channel to a child domain of a domain whose name is Contoso.com

  • Any nonsecure channel to a child domain of a domain whose name is dns.live.com

  • Any channel to a server whose name ends with ".microsoft.com"

  • Any encrypted channel to a host whose IP address is 172.169.4.6

Note After you configure this URL list, the credentials will automatically authenticate to the WebDAV servers, even if these servers are on the Internet.

Things to avoid in the URL list

  • Do not add an asterisk (*) character at the end of a URL. When you do this, a security risk may result. For example, do not use the following URL:

    http://*.dns.live.*

  • Do not add an asterisk (*) character before or after a string. When you do this, the Web Client service can send user credentials to more servers. For example, see the following examples:

    • You add the following URL to the list:

      http://*Contoso.com
      In this example, the service also sends user credentials to http://any_extra_charactersContoso.com

    • You add the following URL to the list:

      http://Contoso*.comIn this example, the service also sends user credentials to http://Contosoany_extra_characters.com

  • In the URL list, do not use the UNC name of a host. For example, do not use the following name:

    *.contoso.com@SSL

  • In the URL list, do not include the share name or the port number to be used. For example, do not use the following:

    • http://*.dns.live.com/DavShare

    • http://*dns.live.com:80

  • Do not use IPv6 in the URL list.

Important This URL list does not affect the security zone settings. This URL list is used only for the specific purpose of forwarding the credentials to WebDAV servers. The list should be created as restrictively as possible to avoid any security issues. Also, because there is no specific deny list, the credentials are forwarded to all the servers that match this list.

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Windows Vista and Windows Server 2008 file information notes

  • The files that apply to a specific product, milestone (RTM, SPn) can be identified by examining the file version numbers as shown in the following table.

    Version

    Product

    Milestone

    Service branch

    6.0.6000.20xxx

    Windows

    RTM

    LDR

    6.0.6001.22xxx

    Windows Vista SP1 and Windows Server 2008 SP1

    SP1

    LDR

  • Service Pack 1 is integrated into Windows Server 2008. Therefore, RTM milestone files apply only to Windows Vista. RTM milestone files have a 6.0.0000.xxxxxx version number.

  • The MANIFEST files (.manifest) and MUM files (.mum) installed for each environment are listed separately . MUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files (attributes not listed) are signed with a Microsoft digital signature.

For all supported 32-bit versions of Windows Vista and of Windows Server 2008

File name

File version

File size

Date

Time

Platform

Davclnt.dll

6.0.6000.20912

54,272

09-Sep-2008

03:19

x86

Davclnt.dll

6.0.6001.22260

54,272

09-Sep-2008

05:27

x86

Mrxdav.sys

6.0.6000.20912

113,152

09-Sep-2008

00:48

x86

Mrxdav.sys

6.0.6001.22260

113,664

09-Sep-2008

02:54

x86

Webclnt.dll

6.0.6000.20912

197,632

09-Sep-2008

03:23

x86

Webclnt.dll

6.0.6001.22260

198,656

09-Sep-2008

05:27

x86

For all supported 64-bit versions of Windows Vista and of Windows Server 2008

File name

File version

File size

Date

Time

Platform

Davclnt.dll

6.0.6000.20912

72,704

09-Sep-2008

03:38

x64

Davclnt.dll

6.0.6001.22260

72,704

09-Sep-2008

04:46

x64

Mrxdav.sys

6.0.6000.20912

137,728

09-Sep-2008

01:12

x64

Mrxdav.sys

6.0.6001.22260

137,728

09-Sep-2008

02:02

x64

Webclnt.dll

6.0.6000.20912

215,040

09-Sep-2008

03:43

x64

Webclnt.dll

6.0.6001.22260

216,576

09-Sep-2008

04:47

x64

Mrxdav.sys

6.0.6001.22260

113,664

09-Sep-2008

02:54

x86

Davclnt.dll

6.0.6000.20912

54,272

09-Sep-2008

03:19

x86

Davclnt.dll

6.0.6001.22260

54,272

09-Sep-2008

05:27

x86

Webclnt.dll

6.0.6000.20912

197,632

09-Sep-2008

03:23

x86

Webclnt.dll

6.0.6001.22260

198,656

09-Sep-2008

05:27

x86

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

More Information

For more information, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates

Additional file information for Windows Vista and for Windows Server 2008

Additional files for all supported 32-bit versions of Windows Vista and of Windows Server 2008

File name

Package_1_for_kb956943~31bf3856ad364e35~x86~~6.0.1.0.mum

File version

Not Applicable

File size

1,777

Date (UTC)

09-Sep-2008

Time (UTC)

17:46

Platform

Not Applicable

File name

Package_2_for_kb956943~31bf3856ad364e35~x86~~6.0.1.0.mum

File version

Not Applicable

File size

2,163

Date (UTC)

09-Sep-2008

Time (UTC)

17:46

Platform

Not Applicable

File name

Package_3_for_kb956943~31bf3856ad364e35~x86~~6.0.1.0.mum

File version

Not Applicable

File size

2,228

Date (UTC)

09-Sep-2008

Time (UTC)

17:46

Platform

Not Applicable

File name

Package_4_for_kb956943~31bf3856ad364e35~x86~~6.0.1.0.mum

File version

Not Applicable

File size

2,228

Date (UTC)

09-Sep-2008

Time (UTC)

17:46

Platform

Not Applicable

File name

Package_for_kb956943_client_0~31bf3856ad364e35~x86~~6.0.1.0.mum

File version

Not Applicable

File size

1,408

Date (UTC)

09-Sep-2008

Time (UTC)

17:46

Platform

Not Applicable

File name

Package_for_kb956943_client_1~31bf3856ad364e35~x86~~6.0.1.0.mum

File version

Not Applicable

File size

1,641

Date (UTC)

09-Sep-2008

Time (UTC)

17:46

Platform

Not Applicable

File name

Package_for_kb956943_client~31bf3856ad364e35~x86~~6.0.1.0.mum

File version

Not Applicable

File size

1,712

Date (UTC)

09-Sep-2008

Time (UTC)

17:46

Platform

Not Applicable

File name

Package_for_kb956943_server_0~31bf3856ad364e35~x86~~6.0.1.0.mum

File version

Not Applicable

File size

1,408

Date (UTC)

09-Sep-2008

Time (UTC)

17:46

Platform

Not Applicable

File name

Package_for_kb956943_server~31bf3856ad364e35~x86~~6.0.1.0.mum

File version

Not Applicable

File size

1,431

Date (UTC)

09-Sep-2008

Time (UTC)

17:46

Platform

Not Applicable

File name

X86_2526aa671a8ec10afa24a6c947c9b5a6_31bf3856ad364e35_6.0.6001.22260_none_670037d6948904f3.manifest

File version

Not Applicable

File size

1,059

Date (UTC)

09-Sep-2008

Time (UTC)

17:46

Platform

Not Applicable

File name

X86_8381892dfe4ac8ab1093a88c75fa500e_31bf3856ad364e35_6.0.6001.22260_none_697defb4bd448d13.manifest

File version

Not Applicable

File size

709

Date (UTC)

09-Sep-2008

Time (UTC)

17:46

Platform

Not Applicable

File name

X86_95d9fa924e502c42b94287474b6af9c8_31bf3856ad364e35_6.0.6000.20912_none_72d0b8881974dc43.manifest

File version

Not Applicable

File size

1,412

Date (UTC)

09-Sep-2008

Time (UTC)

17:46

Platform

Not Applicable

File name

X86_e97c4508b44361df6452e70a74fd9289_31bf3856ad364e35_6.0.6001.22260_none_309500a2085c725e.manifest

File version

Not Applicable

File size

1,412

Date (UTC)

09-Sep-2008

Time (UTC)

17:46

Platform

Not Applicable

File name

X86_microsoft-windows-webdavredir-davclient_31bf3856ad364e35_6.0.6000.20912_none_9267fbd86e3c924a.manifest

File version

Not Applicable

File size

5,069

Date (UTC)

09-Sep-2008

Time (UTC)

04:14

Platform

Not Applicable

File name

X86_microsoft-windows-webdavredir-davclient_31bf3856ad364e35_6.0.6001.22260_none_941628686b8d7f1b.manifest

File version

Not Applicable

File size

5,069

Date (UTC)

09-Sep-2008

Time (UTC)

06:18

Platform

Not Applicable

File name

X86_microsoft-windows-webdavredir-mrxdav_31bf3856ad364e35_6.0.6000.20912_none_134577d0e1b8fc60.manifest

File version

Not Applicable

File size

13,639

Date (UTC)

09-Sep-2008

Time (UTC)

04:11

Platform

Not Applicable

File name

X86_microsoft-windows-webdavredir-mrxdav_31bf3856ad364e35_6.0.6001.22260_none_14f3a460df09e931.manifest

File version

Not Applicable

File size

13,642

Date (UTC)

09-Sep-2008

Time (UTC)

06:16

Platform

Not Applicable

File name

X86_microsoft-windows-webdavredir-webclient_31bf3856ad364e35_6.0.6000.20912_none_53c05c55cfaefb47.manifest

File version

Not Applicable

File size

6,904

Date (UTC)

09-Sep-2008

Time (UTC)

04:15

Platform

Not Applicable

File name

X86_microsoft-windows-webdavredir-webclient_31bf3856ad364e35_6.0.6001.22260_none_556e88e5ccffe818.manifest

File version

Not Applicable

File size

6,904

Date (UTC)

09-Sep-2008

Time (UTC)

06:20

Platform

Not Applicable

Additional files for all supported 64-bit versions of Windows Vista and of Windows Server 2008

File name

Amd64_5d7d2dcfd309e11fbe96cddf600e0b29_31bf3856ad364e35_6.0.6001.22260_none_df54047a69e613ff.manifest

File version

Not Applicable

File size

2,126

Date (UTC)

09-Sep-2008

Time (UTC)

17:46

Platform

Not Applicable

File name

Amd64_bf21b62b21e63f03896eb8dac6514a49_31bf3856ad364e35_6.0.6000.20912_none_f99db9dc3774f694.manifest

File version

Not Applicable

File size

2,126

Date (UTC)

09-Sep-2008

Time (UTC)

17:46

Platform

Not Applicable

File name

Amd64_ccafe47bd7b3464011998163182c41e8_31bf3856ad364e35_6.0.6001.22260_none_0244cc26a0c95135.manifest

File version

Not Applicable

File size

2,478

Date (UTC)

09-Sep-2008

Time (UTC)

17:46

Platform

Not Applicable

File name

Amd64_microsoft-windows-webdavredir-davclient_31bf3856ad364e35_6.0.6000.20912_none_ee86975c269a0380.manifest

File version

Not Applicable

File size

5,087

Date (UTC)

09-Sep-2008

Time (UTC)

03:59

Platform

Not Applicable

File name

Amd64_microsoft-windows-webdavredir-davclient_31bf3856ad364e35_6.0.6001.22260_none_f034c3ec23eaf051.manifest

File version

Not Applicable

File size

5,087

Date (UTC)

09-Sep-2008

Time (UTC)

05:05

Platform

Not Applicable

File name

Amd64_microsoft-windows-webdavredir-mrxdav_31bf3856ad364e35_6.0.6000.20912_none_6f6413549a166d96.manifest

File version

Not Applicable

File size

13,903

Date (UTC)

09-Sep-2008

Time (UTC)

03:55

Platform

Not Applicable

File name

Amd64_microsoft-windows-webdavredir-mrxdav_31bf3856ad364e35_6.0.6001.22260_none_71123fe497675a67.manifest

File version

Not Applicable

File size

13,906

Date (UTC)

09-Sep-2008

Time (UTC)

05:01

Platform

Not Applicable

File name

Amd64_microsoft-windows-webdavredir-webclient_31bf3856ad364e35_6.0.6000.20912_none_afdef7d9880c6c7d.manifest

File version

Not Applicable

File size

6,934

Date (UTC)

09-Sep-2008

Time (UTC)

04:01

Platform

Not Applicable

File name

Amd64_microsoft-windows-webdavredir-webclient_31bf3856ad364e35_6.0.6001.22260_none_b18d2469855d594e.manifest

File version

Not Applicable

File size

6,934

Date (UTC)

09-Sep-2008

Time (UTC)

05:07

Platform

Not Applicable

File name

Package_1_for_kb956943~31bf3856ad364e35~amd64~~6.0.1.0.mum

File version

Not Applicable

File size

2,860

Date (UTC)

09-Sep-2008

Time (UTC)

17:46

Platform

Not Applicable

File name

Package_2_for_kb956943~31bf3856ad364e35~amd64~~6.0.1.0.mum

File version

Not Applicable

File size

2,922

Date (UTC)

09-Sep-2008

Time (UTC)

17:46

Platform

Not Applicable

File name

Package_3_for_kb956943~31bf3856ad364e35~amd64~~6.0.1.0.mum

File version

Not Applicable

File size

2,696

Date (UTC)

09-Sep-2008

Time (UTC)

17:46

Platform

Not Applicable

File name

Package_for_kb956943_client_0~31bf3856ad364e35~amd64~~6.0.1.0.mum

File version

Not Applicable

File size

1,416

Date (UTC)

09-Sep-2008

Time (UTC)

17:46

Platform

Not Applicable

File name

Package_for_kb956943_client_1~31bf3856ad364e35~amd64~~6.0.1.0.mum

File version

Not Applicable

File size

1,375

Date (UTC)

09-Sep-2008

Time (UTC)

17:46

Platform

Not Applicable

File name

Package_for_kb956943_client~31bf3856ad364e35~amd64~~6.0.1.0.mum

File version

Not Applicable

File size

1,721

Date (UTC)

09-Sep-2008

Time (UTC)

17:46

Platform

Not Applicable

File name

Package_for_kb956943_server_0~31bf3856ad364e35~amd64~~6.0.1.0.mum

File version

Not Applicable

File size

1,416

Date (UTC)

09-Sep-2008

Time (UTC)

17:46

Platform

Not Applicable

File name

Package_for_kb956943_server~31bf3856ad364e35~amd64~~6.0.1.0.mum

File version

Not Applicable

File size

1,438

Date (UTC)

09-Sep-2008

Time (UTC)

17:46

Platform

Not Applicable

File name

Wow64_microsoft-windows-webdavredir-mrxdav_31bf3856ad364e35_6.0.6001.22260_none_7b66ea36cbc81c62.manifest

File version

Not Applicable

File size

8,609

Date (UTC)

09-Sep-2008

Time (UTC)

06:06

Platform

Not Applicable

File name

X86_microsoft-windows-webdavredir-davclient_31bf3856ad364e35_6.0.6000.20912_none_9267fbd86e3c924a.manifest

File version

Not Applicable

File size

5,069

Date (UTC)

09-Sep-2008

Time (UTC)

04:14

Platform

Not Applicable

File name

X86_microsoft-windows-webdavredir-davclient_31bf3856ad364e35_6.0.6001.22260_none_941628686b8d7f1b.manifest

File version

Not Applicable

File size

5,069

Date (UTC)

09-Sep-2008

Time (UTC)

06:18

Platform

Not Applicable

File name

X86_microsoft-windows-webdavredir-webclient_31bf3856ad364e35_6.0.6000.20912_none_53c05c55cfaefb47.manifest

File version

Not Applicable

File size

6,904

Date (UTC)

09-Sep-2008

Time (UTC)

04:15

Platform

Not Applicable

File name

X86_microsoft-windows-webdavredir-webclient_31bf3856ad364e35_6.0.6001.22260_none_556e88e5ccffe818.manifest

File version

Not Applicable

File size

6,904

Date (UTC)

09-Sep-2008

Time (UTC)

06:20

Platform

Not Applicable

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

What affected your experience?

Thank you for your feedback!

×