Symptoms
Consider the following scenario:
-
On a Windows Vista-based or Windows Server 2008-based computer, you configure a proxy server in Windows Internet Explorer.
-
You use the Web Distributed Authoring and Versioning (WebDav) protocol to access a Microsoft Office SharePoint Server site.
In this scenario, you are prompted unexpectedly to enter your credentials three times. However, you expect that you can access the site directly.
For example, you are prompted to enter your credentials three times when the following conditions are true:-
You open a Microsoft Office file from a SharePoint Server site.
-
To open the file, you use a 2007 Microsoft Office system program on a Windows Vista-based client computer that has a proxy server configured.
Notes
-
This problem does not occur on a Windows XP-based computer.
-
There's a similar issue that occurs in Windows 7 or Windows Server 2008 R2, see You are unexpectedly prompted to enter your credentials when you try to access a WebDAV resource in a corporate network by using a DirectAccess connection in Windows 7 or in Windows Server 2008 R2 (KB2288297) for detailed information.
Cause
In Windows Vista, Internet Explorer uses the Web Client service when you use Internet Explorer to access a WebDAV resource. The Web Client service uses Windows HTTP Services (WinHTTP) to perform network I/O operations with the remote host. However, WinHTTP does not send user credentials to the SharePoint Server site when the client accesses the SharePoint Server site through a proxy. Therefore, the SharePoint Server site prompts for user credentials.
Resolution
A hotfix is available to resolve this issue. After you apply this hotfix, you have to create a registry entry that is named "AuthForwardServerList." For more information, see the "Registry information" section.
Hotfix information
A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.
If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix. Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site:http://support.microsoft.com/contactus/?ws=supportNote The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language. Important Windows Vista and Windows Server 2008 hotfixes are included in the same packages. However, only one of these products may be listed on the “Hotfix Request” page. To request the hotfix package that applies to both Windows Vista and Windows Server 2008, just select the product that is listed on the page.
Prerequisites
To apply this hotfix, the computer must run one of the following:
-
Windows Vista
-
Windows Vista Service Pack 1
-
Windows Server 2008
Restart requirement
You have to restart the computer after you apply this hotfix.
Hotfix replacement information
This hotfix does not replace any other previously released hotfixes.
Registry information
Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 How to back up and restore the registry in WindowsTo enable this hotfix, follow these steps:
-
Click Start, type
regedit in the Start Search box, and then press ENTER. -
Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WebClient\Parameters
-
On the Edit menu, point to
New, and then click Multi-String Value. -
Type AuthForwardServerList, and then press ENTER.
-
On the Edit menu, click
Modify. -
In the Value data box, type the URL of the SharePoint Server site, and then click OK.
Note You can also type a list of URLs in the Value data box. For more information, see the "Sample URL list" section in this article. -
Exit Registry Editor.
After this registry entry is created, the Web Client service reads the entry value. If the client computer tries to access a URL that matches any of the expressions in the list, the user credentials are sent to authenticate the user, and the user is not prompted for the credentials.
Notes-
You must restart the Web Client service after you modify the registry.
-
You can apply the registry change on any later Windows Operating System as well (no specific hotfix is required there, just the registry modification).
Sample URL list
The following is a sample URL list:
https://*.Contoso.com
http://*.dns.live.com *.microsoft.com https://172.169.4.6
This URL list enables the Web Client service to send credentials through the following channels:
-
Any encrypted channel to a child domain of a domain whose name is Contoso.com
-
Any nonsecure channel to a child domain of a domain whose name is dns.live.com
-
Any channel to a server whose name ends with ".microsoft.com"
-
Any encrypted channel to a host whose IP address is 172.169.4.6
Note After you configure this URL list, the credentials will automatically authenticate to the WebDAV servers, even if these servers are on the Internet.
Things to avoid in the URL list
-
Do not add an asterisk (*) character at the end of a URL. When you do this, a security risk may result. For example, do not use the following URL:
http://*.dns.live.*
-
Do not add an asterisk (*) character before or after a string. When you do this, the Web Client service can send user credentials to more servers. For example, see the following examples:
-
You add the following URL to the list:
http://*Contoso.com
In this example, the service also sends user credentials to http://any_extra_charactersContoso.com -
You add the following URL to the list:
http://Contoso*.comIn this example, the service also sends user credentials to http://Contosoany_extra_characters.com
-
-
In the URL list, do not use the UNC name of a host. For example, do not use the following name:
*.contoso.com@SSL
-
In the URL list, do not include the share name or the port number to be used. For example, do not use the following:
-
http://*.dns.live.com/DavShare
-
http://*dns.live.com:80
-
-
Do not use IPv6 in the URL list.
Important This URL list does not affect the security zone settings. This URL list is used only for the specific purpose of forwarding the credentials to WebDAV servers. The list should be created as restrictively as possible to avoid any security issues. Also, because there is no specific deny list, the credentials are forwarded to all the servers that match this list.
The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.Windows Vista and Windows Server 2008 file information notes
-
The files that apply to a specific product, milestone (RTM, SPn) can be identified by examining the file version numbers as shown in the following table.
Version
Product
Milestone
Service branch
6.0.6000.20xxx
Windows
RTM
LDR
6.0.6001.22xxx
Windows Vista SP1 and Windows Server 2008 SP1
SP1
LDR
-
Service Pack 1 is integrated into Windows Server 2008. Therefore, RTM milestone files apply only to Windows Vista. RTM milestone files have a 6.0.0000.xxxxxx version number.
-
The MANIFEST files (.manifest) and MUM files (.mum) installed for each environment are listed separately . MUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files (attributes not listed) are signed with a Microsoft digital signature.
For all supported 32-bit versions of Windows Vista and of Windows Server 2008
File name |
File version |
File size |
Date |
Time |
Platform |
---|---|---|---|---|---|
Davclnt.dll |
6.0.6000.20912 |
54,272 |
09-Sep-2008 |
03:19 |
x86 |
Davclnt.dll |
6.0.6001.22260 |
54,272 |
09-Sep-2008 |
05:27 |
x86 |
Mrxdav.sys |
6.0.6000.20912 |
113,152 |
09-Sep-2008 |
00:48 |
x86 |
Mrxdav.sys |
6.0.6001.22260 |
113,664 |
09-Sep-2008 |
02:54 |
x86 |
Webclnt.dll |
6.0.6000.20912 |
197,632 |
09-Sep-2008 |
03:23 |
x86 |
Webclnt.dll |
6.0.6001.22260 |
198,656 |
09-Sep-2008 |
05:27 |
x86 |
For all supported 64-bit versions of Windows Vista and of Windows Server 2008
File name |
File version |
File size |
Date |
Time |
Platform |
---|---|---|---|---|---|
Davclnt.dll |
6.0.6000.20912 |
72,704 |
09-Sep-2008 |
03:38 |
x64 |
Davclnt.dll |
6.0.6001.22260 |
72,704 |
09-Sep-2008 |
04:46 |
x64 |
Mrxdav.sys |
6.0.6000.20912 |
137,728 |
09-Sep-2008 |
01:12 |
x64 |
Mrxdav.sys |
6.0.6001.22260 |
137,728 |
09-Sep-2008 |
02:02 |
x64 |
Webclnt.dll |
6.0.6000.20912 |
215,040 |
09-Sep-2008 |
03:43 |
x64 |
Webclnt.dll |
6.0.6001.22260 |
216,576 |
09-Sep-2008 |
04:47 |
x64 |
Mrxdav.sys |
6.0.6001.22260 |
113,664 |
09-Sep-2008 |
02:54 |
x86 |
Davclnt.dll |
6.0.6000.20912 |
54,272 |
09-Sep-2008 |
03:19 |
x86 |
Davclnt.dll |
6.0.6001.22260 |
54,272 |
09-Sep-2008 |
05:27 |
x86 |
Webclnt.dll |
6.0.6000.20912 |
197,632 |
09-Sep-2008 |
03:23 |
x86 |
Webclnt.dll |
6.0.6001.22260 |
198,656 |
09-Sep-2008 |
05:27 |
x86 |
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
More Information
For more information, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates
Additional file information for Windows Vista and for Windows Server 2008
Additional files for all supported 32-bit versions of Windows Vista and of Windows Server 2008
File name |
Package_1_for_kb956943~31bf3856ad364e35~x86~~6.0.1.0.mum |
File version |
Not Applicable |
File size |
1,777 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
17:46 |
Platform |
Not Applicable |
File name |
Package_2_for_kb956943~31bf3856ad364e35~x86~~6.0.1.0.mum |
File version |
Not Applicable |
File size |
2,163 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
17:46 |
Platform |
Not Applicable |
File name |
Package_3_for_kb956943~31bf3856ad364e35~x86~~6.0.1.0.mum |
File version |
Not Applicable |
File size |
2,228 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
17:46 |
Platform |
Not Applicable |
File name |
Package_4_for_kb956943~31bf3856ad364e35~x86~~6.0.1.0.mum |
File version |
Not Applicable |
File size |
2,228 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
17:46 |
Platform |
Not Applicable |
File name |
Package_for_kb956943_client_0~31bf3856ad364e35~x86~~6.0.1.0.mum |
File version |
Not Applicable |
File size |
1,408 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
17:46 |
Platform |
Not Applicable |
File name |
Package_for_kb956943_client_1~31bf3856ad364e35~x86~~6.0.1.0.mum |
File version |
Not Applicable |
File size |
1,641 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
17:46 |
Platform |
Not Applicable |
File name |
Package_for_kb956943_client~31bf3856ad364e35~x86~~6.0.1.0.mum |
File version |
Not Applicable |
File size |
1,712 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
17:46 |
Platform |
Not Applicable |
File name |
Package_for_kb956943_server_0~31bf3856ad364e35~x86~~6.0.1.0.mum |
File version |
Not Applicable |
File size |
1,408 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
17:46 |
Platform |
Not Applicable |
File name |
Package_for_kb956943_server~31bf3856ad364e35~x86~~6.0.1.0.mum |
File version |
Not Applicable |
File size |
1,431 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
17:46 |
Platform |
Not Applicable |
File name |
X86_2526aa671a8ec10afa24a6c947c9b5a6_31bf3856ad364e35_6.0.6001.22260_none_670037d6948904f3.manifest |
File version |
Not Applicable |
File size |
1,059 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
17:46 |
Platform |
Not Applicable |
File name |
X86_8381892dfe4ac8ab1093a88c75fa500e_31bf3856ad364e35_6.0.6001.22260_none_697defb4bd448d13.manifest |
File version |
Not Applicable |
File size |
709 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
17:46 |
Platform |
Not Applicable |
File name |
X86_95d9fa924e502c42b94287474b6af9c8_31bf3856ad364e35_6.0.6000.20912_none_72d0b8881974dc43.manifest |
File version |
Not Applicable |
File size |
1,412 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
17:46 |
Platform |
Not Applicable |
File name |
X86_e97c4508b44361df6452e70a74fd9289_31bf3856ad364e35_6.0.6001.22260_none_309500a2085c725e.manifest |
File version |
Not Applicable |
File size |
1,412 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
17:46 |
Platform |
Not Applicable |
File name |
X86_microsoft-windows-webdavredir-davclient_31bf3856ad364e35_6.0.6000.20912_none_9267fbd86e3c924a.manifest |
File version |
Not Applicable |
File size |
5,069 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
04:14 |
Platform |
Not Applicable |
File name |
X86_microsoft-windows-webdavredir-davclient_31bf3856ad364e35_6.0.6001.22260_none_941628686b8d7f1b.manifest |
File version |
Not Applicable |
File size |
5,069 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
06:18 |
Platform |
Not Applicable |
File name |
X86_microsoft-windows-webdavredir-mrxdav_31bf3856ad364e35_6.0.6000.20912_none_134577d0e1b8fc60.manifest |
File version |
Not Applicable |
File size |
13,639 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
04:11 |
Platform |
Not Applicable |
File name |
X86_microsoft-windows-webdavredir-mrxdav_31bf3856ad364e35_6.0.6001.22260_none_14f3a460df09e931.manifest |
File version |
Not Applicable |
File size |
13,642 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
06:16 |
Platform |
Not Applicable |
File name |
X86_microsoft-windows-webdavredir-webclient_31bf3856ad364e35_6.0.6000.20912_none_53c05c55cfaefb47.manifest |
File version |
Not Applicable |
File size |
6,904 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
04:15 |
Platform |
Not Applicable |
File name |
X86_microsoft-windows-webdavredir-webclient_31bf3856ad364e35_6.0.6001.22260_none_556e88e5ccffe818.manifest |
File version |
Not Applicable |
File size |
6,904 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
06:20 |
Platform |
Not Applicable |
Additional files for all supported 64-bit versions of Windows Vista and of Windows Server 2008
File name |
Amd64_5d7d2dcfd309e11fbe96cddf600e0b29_31bf3856ad364e35_6.0.6001.22260_none_df54047a69e613ff.manifest |
File version |
Not Applicable |
File size |
2,126 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
17:46 |
Platform |
Not Applicable |
File name |
Amd64_bf21b62b21e63f03896eb8dac6514a49_31bf3856ad364e35_6.0.6000.20912_none_f99db9dc3774f694.manifest |
File version |
Not Applicable |
File size |
2,126 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
17:46 |
Platform |
Not Applicable |
File name |
Amd64_ccafe47bd7b3464011998163182c41e8_31bf3856ad364e35_6.0.6001.22260_none_0244cc26a0c95135.manifest |
File version |
Not Applicable |
File size |
2,478 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
17:46 |
Platform |
Not Applicable |
File name |
Amd64_microsoft-windows-webdavredir-davclient_31bf3856ad364e35_6.0.6000.20912_none_ee86975c269a0380.manifest |
File version |
Not Applicable |
File size |
5,087 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
03:59 |
Platform |
Not Applicable |
File name |
Amd64_microsoft-windows-webdavredir-davclient_31bf3856ad364e35_6.0.6001.22260_none_f034c3ec23eaf051.manifest |
File version |
Not Applicable |
File size |
5,087 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
05:05 |
Platform |
Not Applicable |
File name |
Amd64_microsoft-windows-webdavredir-mrxdav_31bf3856ad364e35_6.0.6000.20912_none_6f6413549a166d96.manifest |
File version |
Not Applicable |
File size |
13,903 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
03:55 |
Platform |
Not Applicable |
File name |
Amd64_microsoft-windows-webdavredir-mrxdav_31bf3856ad364e35_6.0.6001.22260_none_71123fe497675a67.manifest |
File version |
Not Applicable |
File size |
13,906 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
05:01 |
Platform |
Not Applicable |
File name |
Amd64_microsoft-windows-webdavredir-webclient_31bf3856ad364e35_6.0.6000.20912_none_afdef7d9880c6c7d.manifest |
File version |
Not Applicable |
File size |
6,934 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
04:01 |
Platform |
Not Applicable |
File name |
Amd64_microsoft-windows-webdavredir-webclient_31bf3856ad364e35_6.0.6001.22260_none_b18d2469855d594e.manifest |
File version |
Not Applicable |
File size |
6,934 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
05:07 |
Platform |
Not Applicable |
File name |
Package_1_for_kb956943~31bf3856ad364e35~amd64~~6.0.1.0.mum |
File version |
Not Applicable |
File size |
2,860 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
17:46 |
Platform |
Not Applicable |
File name |
Package_2_for_kb956943~31bf3856ad364e35~amd64~~6.0.1.0.mum |
File version |
Not Applicable |
File size |
2,922 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
17:46 |
Platform |
Not Applicable |
File name |
Package_3_for_kb956943~31bf3856ad364e35~amd64~~6.0.1.0.mum |
File version |
Not Applicable |
File size |
2,696 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
17:46 |
Platform |
Not Applicable |
File name |
Package_for_kb956943_client_0~31bf3856ad364e35~amd64~~6.0.1.0.mum |
File version |
Not Applicable |
File size |
1,416 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
17:46 |
Platform |
Not Applicable |
File name |
Package_for_kb956943_client_1~31bf3856ad364e35~amd64~~6.0.1.0.mum |
File version |
Not Applicable |
File size |
1,375 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
17:46 |
Platform |
Not Applicable |
File name |
Package_for_kb956943_client~31bf3856ad364e35~amd64~~6.0.1.0.mum |
File version |
Not Applicable |
File size |
1,721 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
17:46 |
Platform |
Not Applicable |
File name |
Package_for_kb956943_server_0~31bf3856ad364e35~amd64~~6.0.1.0.mum |
File version |
Not Applicable |
File size |
1,416 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
17:46 |
Platform |
Not Applicable |
File name |
Package_for_kb956943_server~31bf3856ad364e35~amd64~~6.0.1.0.mum |
File version |
Not Applicable |
File size |
1,438 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
17:46 |
Platform |
Not Applicable |
File name |
Wow64_microsoft-windows-webdavredir-mrxdav_31bf3856ad364e35_6.0.6001.22260_none_7b66ea36cbc81c62.manifest |
File version |
Not Applicable |
File size |
8,609 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
06:06 |
Platform |
Not Applicable |
File name |
X86_microsoft-windows-webdavredir-davclient_31bf3856ad364e35_6.0.6000.20912_none_9267fbd86e3c924a.manifest |
File version |
Not Applicable |
File size |
5,069 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
04:14 |
Platform |
Not Applicable |
File name |
X86_microsoft-windows-webdavredir-davclient_31bf3856ad364e35_6.0.6001.22260_none_941628686b8d7f1b.manifest |
File version |
Not Applicable |
File size |
5,069 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
06:18 |
Platform |
Not Applicable |
File name |
X86_microsoft-windows-webdavredir-webclient_31bf3856ad364e35_6.0.6000.20912_none_53c05c55cfaefb47.manifest |
File version |
Not Applicable |
File size |
6,904 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
04:15 |
Platform |
Not Applicable |
File name |
X86_microsoft-windows-webdavredir-webclient_31bf3856ad364e35_6.0.6001.22260_none_556e88e5ccffe818.manifest |
File version |
Not Applicable |
File size |
6,904 |
Date (UTC) |
09-Sep-2008 |
Time (UTC) |
06:20 |
Platform |
Not Applicable |