The WMS Negotiate Authentication plug-in grants access to the
server based upon the user's network logon approval. This plug-in
uses an encrypted challenge/response scheme to authenticate users.
It is a secure form of authentication because the user name
and password are not sent across the network; the player
acknowledges the password by using a cryptographic exchange with
the Windows Media server. Because the WMS Negotiate Authentication
plug-in relies upon established user logon credentials, the player
and server must be on the same domain or on trusted domains.
Negotiate authentication does not work across proxy
servers or other firewall applications.
Note
If the WMS Negotiate Authentication plug-in is
enabled, Windows Media Services must have logged on using the
Network Service account. Negotiate authentication will not operate
if another account is used. For more information about user
accounts, rights, and permissions, see Windows Help and
Support.
Note