title: MSXML 6, User/PW Auth, ResolveExternals
body: <p>If one must load and parse an XML resource from a user/PW-protected URL you cannot just use an MSXML DOM.Load() as far as I can tell.  There is no place to specify the credentials.</p>
  
  <p>Yet if you use XMLHTTPRequest to obtain and parse the resource into a DOM (via its .responseXML property) you have nowhere to specify a value for the .resolveExternals property.</p>
  
  <p>This more or less works out when you use MSXML 3, 4, (or even 5) where it defaults to True, however in MSXML 6 it defaults to False:</p>
  
  <p><a href="http://msdn.microsoft.com/en-us/library/ms762283%28VS.85%29.aspx" rel="nofollow">resolveExternals Property</a>:</p>
  
  <blockquote>
    <p>In MSXML 3.0, MSXML 4.0, and MSXML 5.0 the default <strong>resolveExternals</strong>
    value is True. In MSXML 6.0, the default setting is False. </p>
    
    <p>If this property is set to False, no external includes and imports
    will be resolved.</p>
  </blockquote>
  
  <p>Is there a way around this that I am not seeing?  Normally I need the externals resolved, especially when dealing with XSDs or WSDLs.</p>
  
  <p>Or am I fooling myself, and perhaps .resolveExternals never applies when using XMLHTTPRequest (only DOM.Load() calls)?</p>