IIS - Capture user logged in to the machine without using Windows authentication

Question

I have a website that uses the user logged into the computer to validate what functionality he will have access to within the site. To capture the user logged into the machine I am using the code below, I needed to change the authentication of IIS for Windows Authentication, but it keeps requesting user and password when accessing the site for the first time.

string userNameWindows = this.Context.Request.LogonUserIdentity.Name;

How do I capture the logged-in user on the machine without requesting login/password on first access.

Answer 1

If you want to check the Windows user with Forms Authentication, you can use this code:

System.Security.Principal.WindowsIdentity.GetCurrent().Name.Tostring()

However, it is not safe. Easily the value of this method will be NT AUTHORITY SYSTEM or the user configured to run the application on IIS. This is because the authentication is with the impersonate property enabled.

Also try this code:

System.Security.Principal.WindowsPrincipal user;
user = new WindowsPrincipal(this.Request.LogonUserIdentity);
this.Request.LogonUserIdentity.Impersonate();
user_name = user_name.Substring(user_name.LastIndexOf("\\") + 1);

In case none of the cases help you, take a look at this link in English: https://stackoverflow.com/questions/16184685/how-do-i-get-the-currently-loggedin-windows-account-from-an-asp-net-page