New Zealand's new Copyright Law presumes 'Guilt Upon Accusation' and will Cut Off Internet Connections without a trial. is against this unjust law - help us

A Space for All Things .NET Related

WST Apps and Authorisation / Authentication

By James Hippolite, in , posted: 15-Apr-2008 14:16

We had a work problem. It was this:
  • COE (common operating environment) calls for IE to reject scripts.
  • we had a login process which used a Windows Scripting Host object to obtain the users Windows signon
  • ergo, occassionally, Network Ops would refresh the COE and our apps would cease their auto-login.
Here is the resolution:
  • Web.config:
    • authentication mode=”Forms”
    • Identity impersonate=”true”
    • authorization deny="?"
  • You need a login page, so that we can authenticate against the database and retrieve the users’ roles.
  • But, you don’t need the Windows Scripting Host script anymore, since WindowsIdentity.GetCurrent().Name now works with the above combination of web.config attributes
  • This will enable NT authenticated access, single sign-on, for any user without adding them to our server(s)
  • If you also want to enable SQL Server Reporting Services, you must further:

Other related posts:
Geek Post Monthly Newsletter Volume 2 Issue 6
Exam 70-300 Objective 3

Add a comment

Please note: comments that are inappropriate or promotional in nature will be deleted. E-mail addresses are not displayed, but you must enter a valid e-mail address to confirm your comments.

Are you a registered Geekzone user? Login to have the fields below automatically filled in for you and to enable links in comments. If you have (or qualify to have) a Geekzone Blog then your comment will be automatically confirmed and shown in this blog post.

Your name:

Your e-mail:

Your webpage:

JamesHip's profile

James Hippolite
New Zealand

Welcome to my technical blog. 

Here, I attempt to distill the Microsoft Certified Professional Developer knowledge I have accumulated since first qualifying MCP in 1996.  This blog started on 13 September 2007 as an off-shoot from my mixed up personal blog.  But it took a shot in the arm from Scott Hanselman's talk at TechEd New Zealand 08 "32 Ways To Make Your Blog Suck Less".