We have a custom IIS application that uses Windows Authentication and runs fine on Windows Server 2008 R2 with IIS 7.5.
After migrating the code to Windows Server 2012 R2 with IIS 8.5, our custom IIS application no longer successfully authenticates users who have special characters like asterisk (*) or exclamations (!) in their passwords.
Other users, with no special characters, authenticate fine.
I assume this is some new, additional layer of protection or filtering that Server 2012 R2 or IIS 8.5 has.
Is there any way to make our Server 2012 R2 / IIS 8.5 system work like our Server 2008 R2/ IIS 7 system, with passwords that contain special characters?