Skip to main content

Accessing WebReports with Windows Authentication from the IIS Server

Garrick Guillory
Updated

When WebReports uses Windows Authentication, additional Windows configuration may be required to access the WebReports application directly from the IIS server hosting it.

Use this article to configure the Windows BackConnectionHostNames registry value for the WebReports host name and, if needed, add the WebReports site to Trusted Sites.

Before You Begin

Before making these changes:

  • Make sure you are logged in to the IIS server with an account that has administrative permissions.
  • Confirm the host name used to access WebReports.

Example:

myapp.mydomain.com

  • Make sure you have access to Registry Editor and IIS Manager.

Important: This procedure requires changes to the Windows Registry. Incorrect registry changes can affect the operating system. Make sure the registry is backed up or that you have an appropriate system backup before making changes.

Open Registry Editor

  1. On the IIS server, open the Start menu.
  2. Search for Registry Editor.
  3. Open Registry Editor as an administrator.

Navigate to MSV1_0

In Registry Editor, navigate to:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0

MSV1_0 registry location

Create BackConnectionHostNames

  1. Right-click MSV1_0.
  2. Select New.
  3. Select Multi-String Value.
  4. Name the new value:
BackConnectionHostNames

Add the WebReports Host Name

  1. Double-click BackConnectionHostNames.
  2. In Value data, enter the WebReports host name.

Example:

myapp.mydomain.com
  1. Select OK.

WebReports host name added to BackConnectionHostNames

Enter the host name used to access WebReports. Do not include https:// or a path unless your environment specifically requires it.

Restart the WebReports Site in IIS

After creating the registry value:

  1. Open Internet Information Services (IIS) Manager.
  2. Locate the WebReports site.
  3. Stop the WebReports site.
  4. Start the WebReports site again.

This allows the WebReports application to reload after the Windows Authentication configuration change.

Add WebReports to Trusted Sites

If Windows does not automatically use the currently signed-in Active Directory credentials, add the WebReports site to the Windows Trusted Sites zone.

  1. Open Internet Options.
  2. Select the Security tab.
  3. Select Trusted sites.
  4. Select Sites.
  5. Enter the WebReports URL.
  6. Select Add.
  7. Select Close, and then select OK.

This step may not be required in every environment.

Verify Windows Authentication

After completing the configuration:

  1. Open a browser on the IIS server.
  2. Navigate to the WebReports URL.
  3. Confirm that WebReports opens using the currently signed-in Windows account.

If you are prompted repeatedly for credentials or cannot access WebReports, review the troubleshooting steps below.

Troubleshooting

WebReports Continues to Prompt for Credentials

  • Confirm that BackConnectionHostNames was created under the correct MSV1_0 registry location.
  • Confirm that the WebReports host name is entered correctly.
  • Confirm that the WebReports site was restarted in IIS.
  • Add the WebReports URL to Trusted Sites if it is not already present.

WebReports Opens from Other Computers but Not from the IIS Server

This configuration is specifically intended for situations where Windows Authentication works from another workstation but does not work when accessing WebReports directly from the IIS server.

Verify that the WebReports host name is included in BackConnectionHostNames.

Windows Authentication Still Does Not Work

  • Confirm that Windows Authentication is enabled for the WebReports site in IIS.
  • Confirm that the correct WebReports host name is being used.
  • Verify that the user has permission to access WebReports.

If the issue continues, contact BridgeWorks Support.

Related Articles

Related articles

Comments

0 comments

Please sign in to leave a comment.