Why doesn't WindowsPrincipal show as IUSR_<machine>?

From: Odie (Odie_at_discussions.microsoft.com)
Date: 06/25/04


Date: Fri, 25 Jun 2004 08:45:04 -0700

I have a test harness set up to explore some .Net security stuff.
I have an .aspx page w/ .cs code-behind that gets the current Windows identity of the asp.net thread:

WindowsIdentity MyIdentity = WindowsIdentity.GetCurrent();
WindowsPrincipal MyPrincipal = new WindowsPrincipal(MyIdentity);

When I had IIS set to [anon + integrated security], my test page printed out:
Principal Name: MYMACHINE\ASPNET
Principal Type: NTLM
Principal IsAuthenticated: True
Identity IsAnonymous: False
Identity IsGuest: False
Identity IsSystem: False

This was good.

But when I removed integrated security from IIS Security tab my test page still prints out exactly the same thing! Then I remembered asp.net has it's own stuff in web.config, so I changed:
 <authentication mode="Windows" />
to
 <authentication mode="None" />

I still get exactly the same output from my test page! Just in case there's some weird caching going on here, I shut down my web server and ran IISRESET - still to no avail.

What I'm expecting to see is the PrincipalName=IUSR_MYMACHINE and IsAnonymous=True.

Anyone?



Relevant Pages

  • [NT] Cumulative Security Update for Internet Explorer (MS04-025)
    ... Get your security news from a reliable source. ... * Microsoft Windows NT Workstation 4.0 Service Pack 6a ... Navigation Method Cross-Domain Vulnerability ...
    (Securiteam)
  • [NT] Vulnerability in HTML Help Allows Code Execution (MS05-001)
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Get your security news from a reliable source. ... * Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service ...
    (Securiteam)
  • Re: The Myth of the secure Mac
    ... OEM Windows XP Home goes for a bit under $100. ... >> secure than Home. ... Though this really has nothing to do with security. ... Microsoft counts on third-party developers to provide more ...
    (comp.sys.mac.advocacy)
  • SecurityFocus Microsoft Newsletter # 149
    ... MICROSOFT VULNERABILITY SUMMARY ... EveryBuddy Long Message Denial Of Service Vulnerability ... Intellitactics Network Security Manager ... Windows operating systems. ...
    (Focus-Microsoft)
  • SecurityFocus Microsoft Newsletter #120
    ... Strengthening Network Security: FREE Guide Network security is a ... MICROSOFT VULNERABILITY SUMMARY ... Microsoft Windows File Protection Signed File Replacement... ... PlatinumFTPServer Information Disclosure Vulnerability ...
    (Focus-Microsoft)