Article ID: 318863 - View products that this article applies to.
This article was previously published under Q318863
We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 7.0 running on Microsoft Windows Server 2008. IIS 7.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:
http://www.microsoft.com/technet/security/prodtech/IIS.mspxFor more information about IIS 7.0, visit the following Microsoft Web site:
This step-by-step article describes how to modify the metabase to control authentication persistence.
HTTP Keep-Alives allow Web browsers to reuse the same TCP connection to make multiple requests to a Web server such as Internet Information Server (IIS). If a Web server requires authentication such as Basic, Kerberos, or Microsoft Windows NT Challenge/Response, a Web browser is challenged for authentication by the server. The Web browser must send authentication information to the Web server. After the Web browser is authenticated by the server, the Web browser can only be challenged again by the server when it opens a new connection from a different TCP port. This is known as authentication persistence.
Authentication persistence can be controlled by the metabase property AuthPersistence. Microsoft recommends that you set this property by setting the corresponding subflag to TRUE, which automatically sets a binary value for AuthPersistence.
NOTE: Always back up the metabase before you edit it.
For additional information about how to back up the metabase, click the article numbers below to view the articles in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/300675/EN-US/ )HOW TO: Create a Metabase Backup by Using Internet Information Server 4.0 in Windows NT
300672To modify the metabase properties as described in this article, run the following at a command prompt:
(http://support.microsoft.com/kb/300672/EN-US/ )HOW TO: Create a Metabase Backup in IIS 5
CSCRIPT.EXE ADSUTIL.VBS SET W3SVC/AuthPersistSingleRequest TRUENOTE: Adsutil.vbs is generally located at Winnt\System32\Inetsrv\Adminsamples (for IIS 4.0) or at Inetpub\Adminscripts (for IIS 5.0).
NOTE: Setting AuthPersistence values can cause the IIS server performance to decrease. Based on the subflag set, the IIS server may challenge each Web browser for each HTTP request that is made to the server. This also may require the IIS server to make authentication requests to the domain controller for each domain account making a new HTTP request.
For more information about authentication persistence, see the IIS 5.0 online documentation at the following Microsoft Web site:
Getting Started with Internet Information Services (IIS)For more information, visit the following Microsoft Developer Network (MSDN) Web site: