Get name from Windows Identity on IIS

Question

It works locally but when I upload my website to an IIS server then it wont work: this is part of my config file which I thought it would work:

<authentication mode="Windows">
</authentication>
<identity impersonate="true"/>
<system.webServer>
<validation validateIntegratedModeConfiguration="false"/>
</system.webServer>

My asp.net code which works locally but not on server:

 string[] temp = Convert.ToString(System.Security.Principal.WindowsIdentity.GetCurrent().Name).Split('\\');
 string userName = temp[1] + "@" + temp[0];
 Console.WriteLine("name: "+ userName);

The name/error which is saved is

NT AUTHORITY\IUSR

Im using windows server 2012 version 6.2 How can I get the windows users name?

Im sorry, but I think it's working, isn't it the IUSR which is connected with the IIS instance? I think it is. Take a look here: learn.microsoft.com/en-us/iis/get-started/planning-for-security/… — Martin M
– Martin M, Commented Feb 16, 2018 at 14:03
Hi It's working yes, but I can't get the machine name/ windows name? if different users use the page? — pancake
– pancake, Commented Feb 16, 2018 at 14:06
As far as I know you can't get the machine name of the visiting machine, unless your on the same internal network and you are able to resolve the name of the computer. On the internet the best you can get is the ip and/or the dns name of the user provided from the ISP. — Martin M
– Martin M, Commented Feb 16, 2018 at 14:09

Schadensbegrenzer · Accepted Answer · 2018-02-16 14:33:42Z

0

It looks like you still have anonymous authentication enabled. Make sure, that it is disabled and only windows authentication is enabled.

A second approach to retrieve the account name of the current user is: Request.LogonUserIdentity.Name

answered Feb 16, 2018 at 14:33

Schadensbegrenzer

9506 silver badges19 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

pancake Over a year ago

When I do this, the whole server goes down and shows an error 500. There is now Windows Authentication on the list either

Schadensbegrenzer Over a year ago

What do you mean by "There is now Windows Authentication on the list either"? Now or no? If windows authentication is missing you need to add the feature to the IIS. However, you need to deactivate anonymous authentication and activate windows authentication (or any other authentication type depending on the type of account you'd like to identify)

DeclanMcD · Accepted Answer · 2018-02-16 14:41:06Z

0

You may be using the wrong property. What you are using will return the username of the account that is running IIS. So on your machine it will be your account if you are running IIS Express for example and will be the service account that the AppPool is running under if it is on a deployed IIS server.

To get the account name of the actual user/machine connecting the you should use

string[] temx = Convert.ToString(HttpContext.Request.LogonUserIdentity.Name).Split('\\');

That is assuming you have anonymous turned off and are using some kind of authentication.

answered Feb 16, 2018 at 14:41

DeclanMcD

1,5864 gold badges23 silver badges41 bronze badges

Collectives™ on Stack Overflow

Get name from Windows Identity on IIS

2 Answers 2

2 Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related