KyleMit's questions

On Windows Server 2008 R2, when I lock the machine, when I return, the Logon Screen screen doesn't remember my username:

I definitely still have a session, because when I log back in, it remembers the state for everything.

This is different that the way locking is handled in most other servers where the username is pre-filled, like this example in 2012:

Where can I go to change this setting?

This is a very basic level question, but it could really benefit from some extra help in the diagnosis.

We have a 2005 SQL Server Named: SERVERNAME-PROD
We have a Web Apps Server that's running IIS 8.5 named: WEBAPPS-PROD

For a while we've been getting login failure notifications that read:

Login failed for user 'DOMAIN\WEBAPPS-PROD$'.[Client: IP_ADDRESS]

There are some live web apps on the web server that connect to that SQL server, but always do so through:

• App Roles
• SQL Logins
• Windows Authentication of the user

To add to the weirdness, it seems to consistently run around the same time of day, but we have no services or tasks scheduled on that server.

Questions:
^{Of course you can't step into our servers, but just looking for general diagnostic advice}

• How is it possible that the web server itself is making calls to the database? It shouldn't even know about the name of the sql server outside of the configuration settings on the web applications.
• In what cases would a web server try to connect as itself to to a particular SQL server?
• How can we add something to trace those sort of calls to find out more information?

I've enable debug logging options on the DNS server, and I'm trying to parse through the output in dns.log. Here's a guide from technet on how to use server debug logging options, but I can't find anything authoritative as to what the standard format for each field would be, let alone when details are included.

Here's a sample log line from the question What Do the Numbers In Parentheses Mean In My Windows DNS Debug Log?:

6/5/2013 10:00:32 AM 0E70 PACKET  00000000033397A0 UDP Rcv 10.161.60.71    5b47   Q [0001   D   NOERROR] A      (12)somecomputer(6)domain(3)com(0)

Unfortunately, that answer didn't go into what any of the other fields mean.

Technet's How DNS Works gives a good review of some of the fields, but nothing specific to the debug log formatting.

What are all the fields?

Bonus points for a powershell script that parses the info.

I have one website called Default Web Site on IIS that grabs all incoming traffic by using all unassigned IP address and omitting the hostname on the binding

So I can access it locally by going to the browser and typing in:

http://localhost/index.html

I can access it on another box in the Network, by opening up the browser and replacing local host with the machine name (webapps) like this:

http://webapps/index.html

That all works fine.

Now I've added a second website that uses the hostname intra.company.com in the binding for the site.

As mentioned in setting Host Name in IIS to www.example.com, I added the following to my hosts file located in C:\Windows\System32\drivers\etc

# localhost name resolution is handled within DNS itself.
#   127.0.0.1       localhost
#   ::1             localhost
    127.0.0.1       intra.company.com

Now, locally, I get the right page if I browse to:

http://intra.company.com/index.html

My question is, can I somehow navigate to that address from another computer, similar to how I was connecting to the site hosted on localhost.

Something like this:

http://webapps.intra.company.com/index.html
http://webapps/intra.company.com/index.html
http://webapps:intra.company.com/index.html

But none of those wild guesses at composing the url work.

Any Ideas?

Note 1: This might be resolvable through changing the DNS server on the network, but I can't access that for now, so I would like to see if there's a way route to a box plus a hostname.

Note 2: Also, I could add a virtual folder to the Default Web Site and redirect requests to localhost plus a folder name to the new website, but this feels like the wrong approach. I really do have two different websites that will resolve to different host names that have very different access patterns so keeping them separate seems ideal.

I am a local admin on a Windows Server 2008 R2 DataCenter machine, but when I remote into the server and open the Control Panel, almost all of the items are gone or missing.

Could there be a security setting somewhere that is preventing these from displaying?

If I click on Control Panel Home, here's a screenshot of my only options: Date and Time, Fonts, Keyboard, and Mouse.

In IIS 6, you could turn on Authentication by right clicking an application, selecting properties, going to the Directory Security Tab, selecting Edit in the Authentication and Access control group box, and setting Authenticated Access to "Basic Authentication (password is sent in clear text)"

In IIS 8.5, I don't see a similar option in the Authentication Menu:

Here's are the docs on Basic Authentication and it says you should just be able to enable it

http://technet.microsoft.com/en-us/library/hh831496.aspx#Basic

But I don't see it anywhere.

We have a website that should only be accessed by authenticated active directory users. The first thing that should happen when entering the site is a prompt to enter windows credentials.

To accomplish this, we've only enabled windows authentication and turned impersonation on.

It looks like this in the config:

<system.web>
    <identity impersonate="true"/>
    <authentication mode="Windows"></authentication>
</system.web>

Which shows up like this in IIS:

But, whenever I navigate to the page, I am not prompted credentials and it uses the server name as the user instead.

What else can I change?

We're using Windows Server 2012 R2 Datacenter
We're using Internet Information Services v 8.5
This is an ASP.NET MVC application using .NET 4.5 Integrated

I'm hoping to get this as soon as someone hits the page: