{"id":126,"date":"2011-12-01T14:02:00","date_gmt":"2011-12-01T14:02:00","guid":{"rendered":"http:\/\/pheonixsolutions.com\/?p=126"},"modified":"2026-06-05T09:11:06","modified_gmt":"2026-06-05T03:41:06","slug":"the-site-is-asking-for-user-name-and-password-while-browsing-windows","status":"publish","type":"post","link":"https:\/\/pheonixsolutions.com\/blog\/the-site-is-asking-for-user-name-and-password-while-browsing-windows\/","title":{"rendered":"The site is asking for a username and password while browsing [Windows]"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Introduction<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If a website hosted on a Windows server prompts visitors for a username and password when accessed through a browser, the most common cause is that the anonymous user configured in IIS is out of sync with the account credentials. This issue can usually be resolved by verifying the authentication settings and updating the anonymous user password.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">Prerequisites<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Remote Desktop access to the Windows server<\/li>\n\n\n\n<li>Access to IIS Manager<\/li>\n\n\n\n<li>Access to the corresponding Plesk account<\/li>\n\n\n\n<li>Administrative privileges on the server<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">Implementation<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Step 1: Open IIS Manager<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Log in to the Windows server using Remote Desktop and open IIS Manager.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">Step 2: Open Website Properties<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Locate the website experiencing the issue.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Right-click the website and select <strong>Properties<\/strong>.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">Step 3: Verify Authentication Settings<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Select the <strong>Directory Security<\/strong> tab.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Under <strong>Authentication and Access Control<\/strong>, click <strong>Edit<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ensure the following options are enabled:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Enable Anonymous Access<\/li>\n\n\n\n<li>Integrated Windows Authentication<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">Step 4: Verify the Anonymous User<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Update the anonymous user&#8217;s password to match the FTP password configured for the account in Plesk.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The anonymous username should be in the following format:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">IUSR_ftpusername<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Replace <strong>&#8220;ftpusername&#8221;<\/strong> with the actual FTP username assigned to the domain.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">Step 5: Apply the Changes<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Click <strong>OK<\/strong> and then click <strong>Apply<\/strong> to save the changes.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">Step 6: Reset the Anonymous User Password (If Required)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If the issue persists, reset the password for the anonymous user account.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">Step 7: Synchronize the Password Using Plesk<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">You can synchronize the anonymous user password using the following Plesk utility command:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&#8220;%plesk_bin%\\websrvmng.exe&#8221; &#8211;update-anon-password &#8211;domain-name=domain.tld<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Replace <strong>domain.tld<\/strong> with the actual domain name.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">Conclusion<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">When a Windows-hosted website prompts for credentials unexpectedly, the issue is often caused by IIS anonymous authentication settings being out of sync. Verifying the IIS configuration and synchronizing the anonymous user password with the corresponding Plesk account typically resolves the problem.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Introduction If a website hosted on a Windows server prompts visitors for a username and password when accessed through a [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[1022],"tags":[],"class_list":["post-126","post","type-post","status-publish","format-standard","hentry","category-web-architecture","psol-cat-web-architecture"],"jetpack_publicize_connections":[],"jetpack_shortlink":"https:\/\/wp.me\/phn2x7-22","jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/posts\/126","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/comments?post=126"}],"version-history":[{"count":2,"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/posts\/126\/revisions"}],"predecessor-version":[{"id":10313,"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/posts\/126\/revisions\/10313"}],"wp:attachment":[{"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/media?parent=126"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/categories?post=126"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pheonixsolutions.com\/blog\/wp-json\/wp\/v2\/tags?post=126"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}