Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

Internet Explorer 7 may not handle the "302 Found" status correctly for Windows Live ID sites and for services authentication


View products that this article applies to.

Important This article contains information about how to modify the registry. Make sure that you back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 (http://support.microsoft.com/kb/322756/ ) How to back up and restore the registry in Windows

↑ Back to the top


Symptoms

Windows Live ID sites and services authentication in Windows Internet Explorer 7 may not handle the "302 Found" status correctly.

↑ Back to the top


Cause

WinINet does not treat the "302 Found" status as an authorization success scenario. This behavior is unlikely to cause problems for existing applications because the cookies that are associated with the successful authentication were previously set.

Microsoft Knowledge Base article 948608 explains that the "302 Found" status is not treated as a possible authentication success. In this scenario, the WWW-Authenticate header is replaced by the Set-cookie header for success. Therefore, the session-scoped credential persistence fails.

↑ Back to the top


Resolution

Security update information

To resolve this problem, install the most current cumulative security update for Internet Explorer. To install the most current updates, visit the following Microsoft Web site: For more technical information about the most current cumulative security update for Internet Explorer, visit the following Microsoft Web site: Note This fix was first included in security update 947864 (MS08-024). For more information, click the following article number to view the article in the Microsoft Knowledge Base:
947864� MS08-024: Cumulative Security Update for Internet Explorer


Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall the operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

To resolve this problem in Internet Explorer, follow these steps:
  1. Install the following Internet Explorer cumulative security update, or install a later cumulative security update:
    944533� MS08-024: Cumulative security update for Internet Explorer
  2. After you install the update in step 1, modify the registry to enable the update. To do this, follow these steps:
    1. Click Start, click Run, type regedit, and then click OK.
    2. Locate and then click the following registry key:
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl
    3. Right-click FeatureControl, point to New, and then click Key.
    4. Type FEATURE_PASSPORT_CHECK_302_FOR_SUCCESS_KB949059, and then press ENTER
    5. On the Edit menu, point to New, and then click DWORD Value.
    6. Type iexplore.exe, and then press ENTER.
    7. Double-click iexplore.exe.
    8. In the Value data box, type 1, and then click OK.
    9. Click the File menu, and then click Exit.
  3. Restart the computer.

↑ Back to the top


Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

↑ Back to the top


More information

For more information, click the following article number to view the article in the Microsoft Knowledge Base:
948608� You have to enter credentials multiple times when you use an Office 2007 application that takes advantage of multiple network stacks
For more information, click the following article number to view the article in the Microsoft Knowledge Base:
824684� Description of the standard terminology that is used to describe Microsoft software updates

↑ Back to the top


Keywords: KB949059, kbqfe, kbfix, kbexpertiseinter, kbbug, atdownload

↑ Back to the top

Article Info
Article ID : 949059
Revision : 5
Created on : 2/3/2011
Published on : 2/3/2011
Exists online : False
Views : 385