SOLVED
Home

How to allow SharePoint to be able to use IWA and OWE in the same time?

%3CLINGO-SUB%20id%3D%22lingo-sub-1102459%22%20slang%3D%22en-US%22%3EHow%20to%20allow%20SharePoint%20to%20be%20able%20to%20use%20IWA%20and%20OWE%20in%20the%20same%20time%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1102459%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20there%20a%20way%20to%20allow%20SharePoint%20to%20be%20able%20to%20use%20%22Integrated%20Windows%20Authentication%22%20(needs%20to%20be%20in%20lntranet)%20and%20%22OWE%20-%20Open%20with%20Explorer%22%20(needs%20to%20be%20in%20Trusted%20Zone)%20in%20the%20same%20for%20IE%3F%3C%2FP%3E%3CUL%3E%3CLI%3EIt%20is%20to%20my%20understanding%20so%20far%20that%20in%20order%20to%20use%20Integrated%20Windows%20Authentication%20for%20IE%2C%20I%20need%20to%20put%20our%20SharePoint%20site%20(Let's%20use%20%3CA%20href%3D%22https%3A%2F%2Fmy.foobar.com%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmy.foobar.com%3C%2FA%3E%20for%20example)%20to%20the%20intranet%20zone.%3C%2FLI%3E%3C%2FUL%3E%3CUL%3E%3CLI%3EIt%20is%20also%20to%20my%20understanding%20that%20in%20order%20to%20use%20the%20OWE%20(Open%20with%20Explorer)%20function%20for%20SharePoint%20document%20libraries%2C%20the%20site%20needs%20to%20be%20in%20the%20trusted%20zone.%3C%2FLI%3E%3C%2FUL%3E%3CUL%3E%3CLI%3EAnd%20if%20I'm%20not%20mistaking%2C%20one%20site%20cannot%20be%20in%20two%20different%20zones%20in%20the%20same%20time.%3C%2FLI%3E%3C%2FUL%3E%3CP%3EWith%20that%20being%20the%20case%2C%20I'm%20assuming%20you%20cannot%20have%20both%20IWA%20and%20OWE%20working%20in%20the%20same%20time%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EP.S.%3C%2FP%3E%3CP%3EI%20worked%20with%20our%20system%20admin%2C%20and%20the%20best%20(as%20far%20as%20group%20policy%20setting%20goes)%20we%20could%20get%20to%20is%20adding%3C%2FP%3E%3CP%3E%3CSTRONG%3E%3CA%20href%3D%22https%3A%2F%2Fmy.foobar.com%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmy.foobar.com%3C%2FA%3E%3C%2FSTRONG%3E%26nbsp%3Bto%20the%20Trusted%20Zone%2C%20and%20adding%26nbsp%3B%3CSTRONG%3E*%3A%2F%2Fmy.foobar.com%3C%2FSTRONG%3E%26nbsp%3Bto%20the%20Intranet%20Zone.%20But%20when%20we%20browse%20to%20our%20sharepoint%20site%2C%20it%20seems%20that%20the%20more%20descriptive%20entry%20(%3CA%20href%3D%22https%3A%2F%2Fmy.foobar.com%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmy.foobar.com%3C%2FA%3E)%20takes%20precedence%20over%20the%20wildcard%20and%20therefore%2C%20IWA%20fail%20to%20kick%20in%20and%20we%20got%20a%20credential%20prompt.%3C%2FP%3E%3CP%3EIs%20there%20a%20way%20to%20resolve%20this%20conflict%20or%20am%20I%20doing%20something%20wrong%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1102459%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ESharePoint%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1103330%22%20slang%3D%22en-US%22%3ERe%3A%20How%20to%20allow%20SharePoint%20to%20be%20able%20to%20use%20IWA%20and%20OWE%20in%20the%20same%20time%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1103330%22%20slang%3D%22en-US%22%3EChange%20the%20Trusted%20Zone%20to%20%22Automatic%20logon%20with%20current%20user%20name%20and%20password%22%20in%20the%20custom%20settings%20for%20that%20zone.%3C%2FLINGO-BODY%3E
Highlighted
Yihuan Liu
Occasional Contributor

Is there a way to allow SharePoint to be able to use "Integrated Windows Authentication" (needs to be in lntranet) and "OWE - Open with Explorer" (needs to be in Trusted Zone) in the same for IE?

  • It is to my understanding so far that in order to use Integrated Windows Authentication for IE, I need to put our SharePoint site (Let's use https://my.foobar.com for example) to the intranet zone.
  • It is also to my understanding that in order to use the OWE (Open with Explorer) function for SharePoint document libraries, the site needs to be in the trusted zone.
  • And if I'm not mistaking, one site cannot be in two different zones in the same time.

With that being the case, I'm assuming you cannot have both IWA and OWE working in the same time?

 

P.S.

I worked with our system admin, and the best (as far as group policy setting goes) we could get to is adding

https://my.foobar.com to the Trusted Zone, and adding *://my.foobar.com to the Intranet Zone. But when we browse to our sharepoint site, it seems that the more descriptive entry (https://my.foobar.com) takes precedence over the wildcard and therefore, IWA fail to kick in and we got a credential prompt.

Is there a way to resolve this conflict or am I doing something wrong?

1 Reply
Highlighted
Solution
Change the Trusted Zone to "Automatic logon with current user name and password" in the custom settings for that zone.
Related Conversations