IIS user identity

Posted on 2012-08-10
Last Modified: 2012-08-10
On our Intranet I have a web site

When I have no web.config forms authentication


Set IIS security to Window and turn anonymous access OFF

Then for myself (an Administrator)  I can see User.Identity.Name

If I turn anonymous access on User.Identity.Name goes away

I need it on, but when I do, I can access...but the end users in our network get a popup window for access.

What is the correct way to do this?
Let them enter their domain/username and password and save?

Add something to their login?

Uncharted territory for me.
Question by:lrbrister
    LVL 33

    Assisted Solution

    Users on the network should authenticate with their domain credentials.

    If this isn't a domain, they'll have to provide appropriate credentials valid on the web server.

    Regardless, if the person athenticating doesn't have NTFS permissions to the pages/folders, they won't be able to see anything.
    LVL 39

    Expert Comment

    by:Kyle Abrahams
    All you should need to do is grant permissions on the Iur_Account (or whatever you're using for your app pool_identity) to the directory where the files are located.  Then anyone should eb able to access it via anonymous access.

    Author Comment

    hey guys...I want to be able to see their domain name with either Environment.GetEnvironmentVariable("USERNAME") or with
    LVL 33

    Accepted Solution

    Then they have to authenticate using Windows Authentication.  If the other users can't access the site when you have Windows Authentication turned on, you don't have permissions set properly on the files for your web site.

    Author Comment

    makes do I do that?

    Add Domain Users to the folder?
    LVL 33

    Assisted Solution

    That should work, if you want all Domain Users to have access.

    Author Closing Comment


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Enabling OSINT in Activity Based Intelligence

    Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

    If you don't have the right permissions set for your WordPress location in IIS, you won't be able to perform automatic updates. Here's how to fix the problem.
    This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
    To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
    This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…

    761 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    10 Experts available now in Live!

    Get 1:1 Help Now