I'm trying to access the Royal Mail parcel tracker at
www.royalmail.com on a Windows 98 client using integrated
authentication to an ISA server running Websense.
If the user account I've logged in to AD with is a member
in a certain security group ("Web managers"), I can
access the tracker submission page a couple of times, but
after the 2nd or 3rd parcel read attempt I get a 404
error in response. I can, however, reload the tracker
page to submit the parcel number.
If the account is a member of a standard user group
instead of "Web managers", the number of times I can
submit a parcel before getting a 404, is completely
random, however more often than not it fails on the first
attempt.
This pattern can be replicated on any Win98 workstation
with a user logged into AD and using IE6.
I've exhaustively checked both AD and Websense. In both
cases, the Royal Mail website is basically set for open
access to all users - ISA doesn't cache it or block it,
and Websense has it defined as a custom site which is
allowed for all users.
The only group policy in existence is the domain group
policy. No administrative templates related to IE are
applied.
I've tried fresh install of IE6SP1 with latest security
updates, both with and without the Java VM. No joy.
Here's the funny thing: I installed Mozilla Firefox,
temporarily enabled basic authentication so it'd work,
and this works fine for all users.
So: What's likely to be the problem?
The authentication method?
The browser?
Or the fact that the workstations are set to use one
profile for all users who log into AD?
Or is there something else I've missed?
Sandi - Microsoft MVP - 19 Sep 2004 02:19 GMT
For advice specific to problems with secure sites, have a look at the first
link - for general advice, have a look at the second:
http://inetexplorer.mvps.org/answers2.htm#secure_sites
http://inetexplorer.mvps.org/answers.htm#dns
Probably a caching issue.

Signature
_______________________________________
Hyperlinks used to ensure advice is current
Sandi - Microsoft MVP since 1999 (IE/OE)
http://inetexplorer.mvps.org
> I'm trying to access the Royal Mail parcel tracker at
> www.royalmail.com on a Windows 98 client using integrated
[quoted text clipped - 41 lines]
>
> Or is there something else I've missed?
Tim Staddon - 21 Sep 2004 13:56 GMT
Hi,
Thanks, but this is not a secure site.
All it is is a parcel trace form, accessed via the Track
& Trace option on the menu. You enter the parcel's
reference code, then a js applet hosted at the same
location retrieves the detail about that parcel.
To all intents and purposes the site itself is going
through to the browser without a hitch, so if it is a DNS
issue it must be a very odd one.
Since the number of times it goes through without failing
varies depending on the user account involved, but this
only happens when using IE6 as the browser through ISA
AND when basic authentication is turned off, I'm tending
towards blaming the MS software rather than DNS.
>-----Original Message-----
>For advice specific to problems with secure sites, have a look at the first
[quoted text clipped - 52 lines]
>
>.