The IIS Web server on Windows supports Challenge/Response Authentication, which defaults to On when IIS is installed. This enables users to use their domain log-ins when requesting resources from IIS and can conflict with Access Manager's authentication.
For example, on the first request from an Internet Explorer (IE) browser to a resource on IIS protected by Access Manager with a basic authentication scheme, IE displays a login dialog box requesting a domain along with the user name and password login provided by Access Manager.
To disable Windows challenge/response authentication
Launch the Microsoft Management Console for IIS.
Select the Web Server Host under Internet Information Server in the left hand panel.
Right click and select Properties.
Scroll down and select Edit the Master Properties for WWW Service.
Select the Directory Security tab.
Select Edit Anonymous Access and Authentication Control.
Complete the appropriate step for your platform:
Windows 2000: Clear the Integrate Windows Authentication box.
Click OK.
In the Windows IIS properties screen, click OK.
Close the Microsoft Management Console.