User Variable

[Bruno]

Do you know how to get windows login variables (i.e. the LOGON_USER server
variable) from ASP without having to fill in the challenge response message
box that automatically appears when you configure IIS to Integrated Windows
Security for a particular site? I don't want users to have to log in again
to the site as they have already logged in to windows but I want to use
their username on the back end to verify permissions. Is it possible?

 

[Ken Schaefer]

A browser does not send credentials to the server *unless* the server says
to the browser "access denied - supply some user credentials please"

At this point, the browser pops-up a dialogue box. It would be a huge
security problem if the browser automatically sent the user's credentials to
any old server that requested them!

That said, IE does automatically log a user on (send their credentials) if
the site is in the Intranet or Trusted Sites security zones. If you are
using a FQDN or IP address for your site, you'll need to add it to the
user's Intranet or Trusted Sites zones (eg using a logon script if you want
to automate the process)

More info here:
http://support.microsoft.com/?id=258063

Cheers
Ken

: Do you know how to get windows login variables (i.e. the LOGON_USER server
: variable) from ASP without having to fill in the challenge response
message
: box that automatically appears when you configure IIS to Integrated
Windows
: Security for a particular site? I don't want users to have to log in again
: to the site as they have already logged in to windows but I want to use
: their username on the back end to verify permissions. Is it possible?
:
:

 

[Bruno]

A browser does not send credentials to the server *unless* the server says
to the browser "access denied - supply some user credentials please"

At this point, the browser pops-up a dialogue box. It would be a huge
security problem if the browser automatically sent the user's credentials to
any old server that requested them!

That said, IE does automatically log a user on (send their credentials) if
the site is in the Intranet or Trusted Sites security zones. If you are
using a FQDN or IP address for your site, you'll need to add it to the
user's Intranet or Trusted Sites zones (eg using a logon script if you want
to automate the process)

More info here:
http://support.microsoft.com/?id=258063

Cheers
Ken

: Do you know how to get windows login variables (i.e. the LOGON_USER server
: variable) from ASP without having to fill in the challenge response
message
: box that automatically appears when you configure IIS to Integrated
Windows
: Security for a particular site? I don't want users to have to log in again
: to the site as they have already logged in to windows but I want to use
: their username on the back end to verify permissions. Is it possible?
:
:

Thanks Ken.