Monday, October 26, 2009

Reminder – Disable Loopback Check

Posting this to remind me that this has to be done to successfully debug SharePoint locally…

When running IIS and logging on locally to a site that uses Integrated Security (Most SharePoint installations do) You must logon to the site.

This is a security feature that is designed to help prevent reflection attacks on your computer. Therefore, authentication fails if the FQDN or the custom host header that you use does not match the local computer name.

To disable this feature you must edit Registry (Windows 2008 Server) or you can use a Microsoft Utility (Fix it) (Currently the Fix it application does not run on Windows 2008 R2)

Read more at Microsoft (You receive error 401.1 when you browse a Web site that uses Integrated Authentication and is hosted on IIS 5.1 or a later version)

Using Regedit:

DisableLoopbackCheck

Insert a DWORD Value named DisableLoopbackCheck and set the value to 1

DisableLoopbackCheck

No comments: