WMS Negotiate Authentication

The WMS Negotiate Authentication plug-in grants access to the server based upon the user's network logon approval. This plug-in uses an encrypted challenge/response scheme to authenticate users. It is a secure form of authentication because the user name and password are not sent across the network; the player acknowledges the password by using a cryptographic exchange with the Windows Media server. Because the WMS Negotiate Authentication plug-in relies upon established user logon credentials, the player and server must be on the same domain or on trusted domains. Negotiate authentication does not work across proxy servers or other firewall applications.

Note

• If the WMS Negotiate Authentication plug-in is enabled, Windows Media Services must have logged on using the Network Service account. Negotiate authentication will not operate if another account is used. For more information about user accounts, rights, and permissions, see Windows Help and Support.