I'm able to log on with windows account. Have done limited testing but it looks good. I've created a link to the windows.aspx page; sometimes it auto-logs the person in, and other times the username/password dialog appears.

I'm just trying to understand what makes it choose which to do. From off-network, obviously, the dialog will always appear. But why does it sometimes appear when logged on to the network?

It seems that logging on in that manner will set the state for multiple later logins with just a click - until something happens to prompt the dialog to appear once again.

Is this typical, or is it something in the way I have (or haven't) set up?

I had it both places, actually:

*.domain.tld

in the "Intranet" settings

and then https://ww3.domain.tld/site/ in "Trusted Sites"

When so doing I got the dialog occasionally, but not always. I have removed the entry from "Trusted Sites" and will monitor this behavior.

Thanks for your response.