I'm seeing a lot of 401s in the IIS status logs. I know this is normal for windows authentication, but it seems like the authentication should be cached.
For example, a user will get a 401 when accessing a the home page default.aspx file for a site. They will authenticate and get a 200. Two minutes later, the same user loading the same default.aspx file on the same site will get another 401 error. Why is is trying to authenticate so frequently?
We are using Windows authentication with NTLM. We're running IIS 6. The client is accsesing the site using IE8.