Server Variables Issue - LOGON_USER

[jayraykay]

Hello,

I need to grab the Windows account the person who is logged on to the PC.

I am running in to a problem using Intergrated Windows Authentication in IIS.

If someone previously hit a NTFS password protected page and entered a different username and password and check the "remember this password" option, the username that the persone entered is what is returned by the server variables...LOGON_USER and REMOTE_USER.

Is there any way to override this so the LOGON_USER and REMOTE_USER variables are returned to the user who is logged on to the PC?

Thanks.

 

[onpnt]

sounds like you're writing a cookie to the server and not the client machine. is that how you are tasking the "remember this password" option?

___________________________________________________________________
[sub]

http://www.onpnt.com

The answer to your ??'s may be closer then you think.
Check out Tek-Tips knowledge bank by clicking the FAQ link at the top of the page[/sub]

 

[jayraykay]

Actually...the "remember" password option is on the NTFS authentication prompt that displays when you hit a file that either you dont have access to or isnt setup for Windows Intergrated authentication in IIS.

I have my file marked for windows integrated authentication so users can hit the "non anymouse access" file without being prompted for a password (if they have the proper authority to the file through NTFS security.)

The problem I am having is this...

Lets say, I hit a "non anonymous access" and non windows integrated authentication file from the webserver. I am prompted for an NT username and password...

Lets say I am logged on the the PC as JANEDOE....Now I hit the file and enter JOHNDOE (NOT JANEDOE) and authenticate successfully AS JOHNDOE...(and select to rememeber my password)

Now....I try to hit a different file on the server....with "Integrarated Windows Authentication" marked....

The REMOTE_USER and LOGON_USER variables still think.. I'm JOHNDOE....not JANEDOE... It must be cached somewhere...

I would like to revert the variables back to the user who is logged on to the PC.

I hope that was clear as mud.

thanks!