Take the 2-minute tour ×  Having an issue with random
individuals trying to access an intranet site with a security
certificate. Most users are able to simply select their
Smartcard/CAC certificate, enter the pin number and then are
granted access to the site's pages.  However, random individuals
enter their pin and then are immediately re-prompted by the IE
alert dialogue to enter their domain username and password. If
they don't enter their network domain username and MS password,
then they receive a 401.1 Unauthorized.  I am confused as to why
these certain users (who are selecting the same certificates as
the successful ones) are being prompted for their domain
name/pwd. Furthermore, they're able to access other sites which
require a CAC to get past the security certificate.  Possible
that a user token is unable to be established via a CAC card for
the particular site, but not sure why. Since these users are
getting a 401.1, then somehow their identity associated with
their CAC credentials is not validati