Re: Anonymous and Domain user combo on IIS

From: Andreas Klein [MSFT] (andrekl_at_online.microsoft.com)
Date: 06/30/03


Date: Mon, 30 Jun 2003 15:51:20 +0200


It might be easier to add a bit of logic and use a session var to the
LOGON_USER var content. In case of anonymous you set thist to whatever you
want so your code works as expected. Then enable anonymous access for the
pages you want to be accessible.

Your requirements contradict the design of what the LOGON_USER var is for.
The prompt will always be there if you want the user to be authenticated
(i.e. no anonymous allowed).

There are methods to cheat but these will introduce considerable security
issues so I cannot list these here (nor would I recommend to continue
working into that direction).

I hope this still helps.

-- 
Mit freundlichen Grüßen /  Kind Regards,
Andreas Klein
Microsoft Services
Die Inhalte der in dieser Newsgroup eingestellten Nachrichten stammen von
Dritten. Microsoft kann daher für die Richtigkeit und Vollständigkeit der
Inhalte keine Haftung übernehmen.
This posting is provided "AS IS" with no warranties, and confers no rights.