Our Intranet uses NTLM to challenge/response users so that they login. We have migrated onto a new domain "SJP" but we still allow users to login under the "JRA1" domain. We want to redirect (the redirect part we can do) those logging in under the "JRA1" domain to a page that then re-prompts them for their credentials (username, password and domain) before passing them to the home page of our Intranet. We've tried this using the Response.Status = "401 Unauthorized" statement, but the user keeps getting asked for their credentials. Not sure if this is a ASP/VBScript issue, but does anyone know how we can ask user to re-authenticate?

Are you putting any conditons to decide whether to send the 401 response? Or are you just sending it all the time?

Why do you need the users to re-authenticate? This is handled in the background by the browser automatically sending the credentials so the user shouldn't need to actually enter their name/pwd.

Or do you mean that you want the user who is logged in under JRA1 domain to be rejected and asked to login under "SJP" domain? If so you should be able to do this by parsing the Request.ServerVariables("LOGON_USER") something like this:

' check for no credentials
If Len(Trim(Request.ServerVariables ("LOGON_USER"))) = 0 Then
    bNeedLogon = True
Else
    ' check for old domain
    sDomain = Split(Trim(Request.ServerVariables ("LOGON_USER")), "\")(0)
    bNeedLogon = (sDomain = "JRA1")
End If

If bNeedLogon Then
    Response.Status = "401 Unauthorized"
    Response.AddHeader "WWW-Authenticate", "NTLM"
    Response.End
End If

I'm confused though, you must be doing something like this already to decide on whether to redirect the user?

hth
Phil