Re: Securing through the IIS web server domain logon

[Ben Timby <asp () webexc com>]

It is available via the REMOTE_USER CGI variable...

in asp:

<%
strDomainUser = Request.ServerVariables("REMOTE_USER")
%>

see:
http://hoohoo.ncsa.uiuc.edu/cgi/env.html

Hope that helps.

Koniszewski, Jeffrey wrote:

> Our application provides security via an application logon and web application session. We layer lots of access control 
> on top of the user session. The web server is set to serve up files via the iusr account, i.e. web server access is via 
> anonymous logon.
>
> We have a customer with high security needs that wants to restrict directory access on the web server to domain 
> authenticated users (remove iusr access). This, as I understand it, would require the web server to prompt for domain 
> authentication. Then file access on the web server would be via the authenticated domain user's account. However, our 
> application still needs to authenticate the user as well. Actually, all we probably need is the user name. We have never set 
> up to work this way. Is there a way to get the user name from the IIS domain logon? Is it accessible via the HTTP session? 
> Thanks.