Windows NT Challenge/Response must be enabled in the Web site properties in IIS. Anonymous authentication is attempted first, followed by Windows Integrated authentication, Digest authentication and then Basic (clear text) authentication. Internet Explorer does not pass your user name and password automatically when you are using Basic (clear text) authentication or Digest authentication. You are always prompted for credentials when you are using these authentication methods.