Are they in an IE zone that includes 'automatic logon with current
username and password'

There is also a glitch if you are using SharePoint Server 2007 over SSL
with a Vista client. This is being worked, but I don't know if there is
a solution yet.

Remember, that automatic logon with current username and password will
only work properly if the computer is a member of the domain where
SharePoint is installed. Since HTTPS: is normally used to come in to an
enterprise from the outside 'automatic logon' may not work anyway.

I'm not sure... what should they be in?

I usually put them in Trusted Sites. Be aware, IE6 has automatic logon
turned on by default for Trusted Sites; IE7 does not. With IE7 you must
enable this (at the very bottom of 'Custom Levels')

While it will pass credentials for a user on a machine that is a member
of a domain, selecting this setting will also cache NTLM passwords on
machines that are not a member of a domain (usually). We use this trick
when there are multiple  login forests or when allowing users from the
home machines.

I think a bit more information is in order:

External connections via non-domain member aside, Internally, I've
noticed that that authentication requests seem to happen each time you
attempt to open an OFFICE document on the SPS2003 box.

The SQL 2000 server and the SPS 2003 server are on the same box.

The external portal server sits on an isolated DMZ with only the proper
ports opened to connect to one of the DCs.


If a user attempts to open a PDF file, or some non-office document, then
the file just opens.

IE has the server in the rusted site category, and the setting is
"automatic logon with current username and password."

All of the computers in the build are members of the domain.

You might try a test by removing the OpenControl key for some of the
Office doc extensions in the DocIcon.xml file. The file is located in
the 12/Template/XML directory. The OpenControl key points to an
assembly that is used to invoke Office apps from inside SharePoint
(normally when you click on the New button). But it may be why you are
seeing a difference between Office and non-office apps. Non-office apps
are opening based on the MIME type extension specified in the browser.
Office apps are set to have additional features.

What's the full path on a SPS 2003 server?

C:\Program Files\common Files\Microsoft
Shared\Webserverextensions\60\TEMPLATE\XML

I think that's right. Its really sad when you can quote the location of
the 60 hive from memory.

Shouldn't \Webserverextensions\ be \Web Server Extensions\

So do I need to restart the server after modifying the docIcon.xml file?

I removed the OpenControl Key entry from power point documents... but it
still asks for authentication.

Yes, you probably need at least an IISreset. I don't know that this
will make a difference. But it was worth a try. If not just put the
entry back the way it was and we'll have to try something else.