Hi
I have got a simple 2 page ASP.NET web appliction developed using .NET 4.5 and hosted in IIS 8.5 as seperate web site on port 80 with it is own application pool.  The only change in the IIS we did was to enable Windows Authentication and disbale anonymous authentication at web site level.
The home page has a login module which validates users against AD by taking user's email and password.
Everything works ok until user enters a bad password, the page tries to validate users against AD with given details as usual and shows error message invalid login, but immediately after that Windows Security box pops up asking user to enter credentials and that pop up continues even though user enters right credentials. Windows Security box still pops up eventhough if the browser is reopened again.
The above issue stays for 20 minutes and after that time it just works perfectly fine validating users against AD and redirect them to other page unti ...

Go to the complete details ...