Integrated Windows Authentication

[thomson]

Hi All,
If i log into my windows machine, Iam already
authenticated against the AD, Inorder to identify the Groups, Do i need
to check the Active Directory once again, or Windows Principal.IsInrole
is sufficient.
All the developers are using logon to a particular domain and doing
the work, IF i access one of my developers machine [IIS webserver ],
through my machine , which credentials it take ,will it take mine or
his credentials?

Thnaks in Advance

Thomson

[Norman Yuan]

How do you access the IIS on the other machine? Assume the "access" means a
web/ASP.NET application running on that computer. In this case, it depends
on how the IIS the the web application is configured. As you may know, the
user account running an ASP.NET could be MachineName\ASPNET,
MachineName\Network Service, or any user account on that computer or in a
network domain if impersonation is enabled.

"thomson" <sa**********@yahoo.comwrote in message
news:11*********************@e3g2000cwe.googlegrou ps.com...

Hi All,
If i log into my windows machine, Iam already
authenticated against the AD, Inorder to identify the Groups, Do i need
to check the Active Directory once again, or Windows Principal.IsInrole
is sufficient.
All the developers are using logon to a particular domain and doing
the work, IF i access one of my developers machine [IIS webserver ],
through my machine , which credentials it take ,will it take mine or
his credentials?

Thnaks in Advance

Thomson

[thomson]

Hi,
i have enabled Integrated Windows Authentication,disabled
Anonymous and in Identity Impersonate is true,

Any thoughts for this
" If i log into my windows machine, Iam already
authenticated against the AD, Inorder to identify the Groups, Do i
need
to check the Active Directory once again, or Windows
Principal.IsInrole
is sufficient."

Thanks in Advance

Thomson

Norman Yuan wrote:

How do you access the IIS on the other machine? Assume the "access" means a
web/ASP.NET application running on that computer. In this case, it depends
on how the IIS the the web application is configured. As you may know, the
user account running an ASP.NET could be MachineName\ASPNET,
MachineName\Network Service, or any user account on that computer or in a
network domain if impersonation is enabled.

"thomson" <sa**********@yahoo.comwrote in message
news:11*********************@e3g2000cwe.googlegrou ps.com...

Hi All,
If i log into my windows machine, Iam already
authenticated against the AD, Inorder to identify the Groups, Do i need
to check the Active Directory once again, or Windows Principal.IsInrole
is sufficient.
All the developers are using logon to a particular domain and doing
the work, IF i access one of my developers machine [IIS webserver ],
through my machine , which credentials it take ,will it take mine or
his credentials?

Thnaks in Advance

Thomson

[Norman Yuan]

OK, Assume you want to access a ASP.NET app on the other developer's
computer. Based on how you have configured that ASP.NET app:

1. IIS: anonymous access is unchecked and Windows integrated authentication
is checked.

So, yes, your access to that APS.NET app on the developer's computer is
automatically authenticated as long as you log on to your computer. meaning
the ASP.NET on that computer knows that you are who you should be, since you
are a logged on domain user.

2. Since you enabled "impersonation", now that ASP.NET will run, using your
identity when you send request to it. So, you do not need to check who the
user is.

Tip: you could verify which user account is actually used for a ASP.NET,
like this (add a lable to a blank page in a ASP.NET app):

private void Page_Load(....)
{
Label1.Text=this.Context.User.Identity.Name + " is the running user
account for this ASP.NET app!";

''Or
''Label1.Text=Page.User.Identity.Name + " is the running user account
for this ASP.NET app!";
}


"thomson" <sa**********@yahoo.comwrote in message
news:11**********************@k70g2000cwa.googlegr oups.com...

>
Hi,
i have enabled Integrated Windows Authentication,disabled
Anonymous and in Identity Impersonate is true,

Any thoughts for this
" If i log into my windows machine, Iam already
authenticated against the AD, Inorder to identify the Groups, Do i
need
to check the Active Directory once again, or Windows
Principal.IsInrole
is sufficient."

Thanks in Advance

Thomson

Norman Yuan wrote:

>How do you access the IIS on the other machine? Assume the "access" means
a
web/ASP.NET application running on that computer. In this case, it
depends
on how the IIS the the web application is configured. As you may know,
the
user account running an ASP.NET could be MachineName\ASPNET,
MachineName\Network Service, or any user account on that computer or in a
network domain if impersonation is enabled.

"thomson" <sa**********@yahoo.comwrote in message
news:11*********************@e3g2000cwe.googlegro ups.com...

Hi All,
If i log into my windows machine, Iam already
authenticated against the AD, Inorder to identify the Groups, Do i need
to check the Active Directory once again, or Windows Principal.IsInrole
is sufficient.
All the developers are using logon to a particular domain and doing
the work, IF i access one of my developers machine [IIS webserver ],
through my machine , which credentials it take ,will it take mine or
his credentials?

Thnaks in Advance

Thomson