This was cross-posted to inetserver.iss.  Sorry, but I HAVE to get an answer
to this problem!

I have a simple ASP stript that writes a cookie.  I have set IE to "No
Cookies - Prompt".  I run the script from a site and I get the prompt.  This
works O.K; i.e., as expected.

THEN, I run EXACTLY the same script from another one of my sites (different
computer) and (1) I don't get the prompt AND (2) the cookie gets written
into my Cookies folder!!!!  And, yes, I have IE Cookies set to Prompt and I
did NOT check the "Always allow session cookies" (although I looked at the
cookie that was created and the only value in it is the SessionID.  The
additional cookie that I wrote was NOT in the cookie)!  Now, here's another
thing to think about.  I have a global.asa that is doing a bunch of cookie
related stuff.  If I "disable" global.asa by renaming it, then I still DON'T
get the prompt but there is NO cookie written out!  In the first test
referered to above (where it worked) I don't use a global.asa.

??????????????????????

BTW, Firefox & Mozzilla work as expected with both sites!

TIA,

Larry Woods

You are probably more likely to get an answer if you improve your attitude.
Attacking people trying to be helpful is not going to get you a response, no
matter how much you "have" to get an answer. Ultimately, this is your
problem, and since this is a free support forum, you get what you pay for.

Question 1)
That said, for the two sites in question, what security zones does IE think
they are in? (there is an icon down the bottom right hand corner of IE that
tells you)?

Question 2)
Using a tool like Ethereal (www.ethereal.com) or Netmon are you able to
verify that the cookie is sent from the server to client, and the client is
returning the cookie on subsequent requests?

Cheers
Ken

Show quoteHide quote

IIS 5.0 Directory Settings help
Consuming ASP.NET Web Service
401.1 After IIS6 Setup
Change in ASP.Net authentication between Win2000 and Win2003
Firewall and Win 2K