** be forewarned this is a ramble and I may or may not come back and fix this…..

I have two domain controllers that are Windows Server 2008, A WSS Farm. One web front end (application server, search, Sites) and a SQL server. I have been convinced for months that I had Kerberos setup correctly in my environment. And I couldn’t find any errors anywhere, and fiddler http://www.fiddler2.com/fiddler2/  showed that I was getting Kerberos tickets. However every time I opened an office 2007 document I would get another password challenge. I have spent days working on this issue. Thinking that my AD was broke so, plenty of trial and error attempts, then thinking it was an SPN issue, so again a billion more attempts there, Then I thought oh it’s the Web front, a billion and one attempts there.

Finally I was requested to do some desktop support, this user has XP. (some background) Since I had broke and re-broke our group policies, mainly to use a blank one to see if that was the trick. This cause out trusted sites to get messed up.) I thought well let me see if this is an Vista issue. And sure enough it work correctly in XP. So I started to do some research and finally came across this link. http://support.microsoft.com/?id=943280 not sure if this is just a hack to the system or not, but it works. Throw me a line if you need help with it. Thanks

Search phrases:

I broke my keyboard trying to figure this out.

Double authentication prompt office

Double authentication prompt office 2007 vista

Kerberos enabled but office prompts for password

Kerberos enabled office double prompts

Double authentication prompt office wss

Double authentication prompt office 2007 vista wss

Kerberos enabled but office prompts for password wss

Kerberos enabled office double prompts wss

Double authentication prompt office moss

Double authentication prompt office 2007 vista moss

Kerberos enabled but office prompts for password moss

Kerberos enabled office double prompts moss