How do you logout when using Windows authentication in ASP.NET like this web.config?

    &lt;authentication mode=&quot;Windows&quot; /&gt;

I&#39;ve already tried the following unsuccessfully.  It redirects, but does not log out the user.

    void logoutButton_Click(object sender, EventArgs e) {
    	HttpContext.Current.Session.Clear();
    	HttpContext.Current.Session.Abandon();
    	ViewState.Clear();
    	FormsAuthentication.SignOut();
    	Response.Redirect(&quot;/&quot;);
    }

Background Info:

I have to use Windows authentication because I need to impersonate the identity using Active Directory to gain access to local files.  And I cannot impersonate using Forms authentication because the `HttpContext.Current.User.Identity` won&#39;t be a `WindowsIdentity`.
https://stackoverflow.com/questions/1066275/impersonate-using-forms-authentication

ASP.NET Windows Authentication logout

I am calling a third party service and when I ask for a response it throws out an exception that says 

&gt;&quot;Authentication failed because the remote party has closed the transport stream exception&quot;.

 I think that there is a problem in sending credentials. I have even tried supplying new credentials. Here is the full code 


    string get_url = &quot;https://**.*******.com/com/******/webservices/public_webservice.cfc?wsdl&amp;Method=CreateUser&amp;SiteID=**&amp;WSPassword=******&amp;UserName=******&quot;;
    HttpWebRequest request = (HttpWebRequest)WebRequest.Create(get_url);
    request.MaximumAutomaticRedirections = 4;
    request.MaximumResponseHeadersLength = 4;
    request.Credentials = CredentialCache.DefaultCredentials;
    //request.UseDefaultCredentials = false;
    //request.Credentials = new System.Net.NetworkCredential(&quot;*****&quot;, &quot;*****&quot;);
    request.ContentType = &quot;application/x-www-form-urlencoded; charset=ISO-8859-1&quot;;

    // Show the sent stream
    //lbl_send_stream.Text = send_stream;
    //lbl_send_stream.Text = get_url;
    // Get UserId And LoginToken From Third Party DB
    // ==============================================
    //Exception gets throwed When code hits here
    HttpWebResponse response = (HttpWebResponse)request.GetResponse();
  
[![enter image description here][1]][1]


  [1]: http://i.stack.imgur.com/bLNdf.png

Authentication failed because the remote party has closed the transport stream exception when getting a response from webservice

This is for IIS 7 on a Windows Server 2008 that is not part of an AD domain.  I would like to password protect a website, where people have to enter a username/password (a windows account for example) to view the website.  The website would then use its own authentication method (forms) to handle user accounts and decide whether or not to show member specific pages, etc. 

With IIS6, we just disabled anonymous access and enabled integrated windows authentication.  IIS7 behaves differently and when I enter the windows username/password to view the site, the site comes up fine but redirects to the login page.  Once I log in, the site behaves naturally. I need to be able to navigate the site without logging in with the website credentials.

I don&#39;t think enabling anonymous access would make sense here since I want access to the website to be password protected (popup username/password dialog when you first navigate to the url).

Any help is appreciated!

IIS7: Setup Integrated Windows Authentication like in IIS6

I&#39;m trying to enable CORS support in my WebAPI project, and if I enable Anonymous Authentication then everything works fine, but with Windows Auth + disabled anonymous authentication, the OPTIONS request sent always returns a 401 unauthorized response. The site requesting it is on the DOMAIN so should be able to make the call, is there any way to get around the issue without disabling Windows Authentication?

401 response for CORS request in IIS with Windows Auth enabled

I have an (ASP.NET 3.5) intranet application which has been designed to use forms authentication (along with the default aspnet membership system). I also store additional information about users in another table which shares its primary key with the aspnet_users table.

For users who are part of our domain I store their domain  account name in the secondary users table, and I want to automatically log in users whose domain account name matches a name stored in the table.

I have read the guides which are available - they&#39;re all from two years ago or more and assume that you are able to activate Windows Authentication on a separate login page that allows you to extract the domain account name. From what I can tell, though, this is not possible in IIS7 (the overall authentication method is applied on all pages and cannot be selectively deactivated, and both authentication methods can&#39;t be applied on the same page).

Is there a way of getting IIS to pass through the windows domain account name of the requesting user? I don&#39;t need proper AD authentication, just the domain name.

Mixing Forms authentication with Windows authentication

I&#39;m trying to use IIS Express with VS2010 to host a silverlight application.  I modified my applicationhost.config file to allow for modification of the proper configuration settings.  I have the following in my web.config:

    &lt;location path=&quot;&quot;&gt;
      &lt;system.webServer&gt;
        &lt;security&gt;
          &lt;authentication&gt;
            &lt;anonymousAuthentication enabled=&quot;false&quot; /&gt;
            &lt;windowsAuthentication enabled=&quot;true&quot; /&gt;
          &lt;/authentication&gt;
        &lt;/security&gt;
      &lt;/system.webServer&gt;
    &lt;/location&gt;

I am not being authenticated and my domain service call returns a null record as the user.  I was able to get this to work after installing VS2010 SP1 BETA but I&#39;m trying to get this to work with only IIS Express.

How do I enable Windows Authentication to work with IIS Express.  Is there a configuration setting that I am missing?


IIS Express Windows Authentication

I am creating a website, but in the database I use windows authentication.

I know that you use this for SQL authentication

    &lt;connectionStrings&gt; 
        &lt;add name=&quot;NorthwindContex&quot; 
           connectionString=&quot;data source=localhost;
           initial catalog=northwind;persist security info=True; 
           user id=sa;password=P@ssw0rd&quot; 
           providerName=&quot;System.Data.SqlClient&quot; /&gt; 
    &lt;/connectionStrings&gt;

How do I modify this to work with windows authentication?

Connection string using Windows Authentication

I have a .NET 3.5 application running under IIS 7 on Windows 2003 server and cannot get integrated windows authentication working properly as I continue to get prompted for a login. I have set Windows Authentication to enabled in IIS with all other security types disabled and my application web.config file authentication/authorization is set up as:

    &lt;system.web&gt;
        &lt;compilation debug=&quot;true&quot; strict=&quot;false&quot; explicit=&quot;true&quot; targetFramework=&quot;3.5&quot; /&gt;
        &lt;authenticationmode=&quot;Windows&quot;/&gt;
        &lt;authorization&gt;
    	&lt;deny users = &quot;?&quot; /&gt;
        &lt;/authorization&gt;
    &lt;/system.web&gt;

With this setup, I&#39;m expecting behind the scene verification of the Windows user to allow access and deny anonymous users. However, what I&#39;m getting is a Windows login pop-up when I try to access the site.

I have been troubleshooting this issue for a few days now and cannot figure out the problem. Based on posts with similar problems, I confirmed my URL does not include any periods, double checked that my IE settings are set to Enable Integrated Windows Authentication, and also added my URL to my intranet sites, but still getting the pop-up.

To troubleshoot it further, I enabled Anonymous Authentication in IIS and modified my web.config file to &lt;allow users = &quot;*&quot;/&gt; which lets me right in and then added Response.Write(System.Security.Principal.WindowsIdentifity.getcurrent().user.name.toString()) to try to see what user is being used in the authentication. The result I&#39;m getting is IIS APPPOOL\myapp which is obviously the IIS application pool for my application.

I really appreciate any help anyone can provide so that I&#39;m still using only windows authentication but don&#39;t get the pop-up and the windows authentication is performed against the actual Windows user.

Thanks.

************************
Additional note after troubleshooting further:

Just noticed that when the login fails and the Windows login prompt displays again, it is showing the username that attempted to login as &quot;SERVERNAME&quot;\&quot;USERNAME&quot; which led me to believe it was trying to validate the user against the server vs. the domain. To confirm this, I created a local user account directly on the app server with the same username and password as the network domain user and tried to login again. The result was that I received the login prompt again but when I entered the username and password this time, I was able to successfully login. The network user and app server are on the same domain so really not sure why IIS authentication is pointing to the local app server accounts and not to the domain accounts. I realize this is an IIS question at this point so posting on forums.iis.net as well but appreciate any advice anyone may have since have been troubleshooting this for days.

Receiving login prompt using integrated windows authentication

I&#39;m trying to pick up the windows username when debugging in Visual Studio 2013. I am simply using:

&lt;!-- language: lang-cs --&gt;

    httpcontext.current.user.identity.name

If I run this on my Dev Server it works fine, if I run it in debug mode on any previous version of Visual Studio it also works fine.

My problems is - If i run this on visual studio 2013 I get an empty string.

My web config is as follows.

&lt;!-- language: lang-xml --&gt;

    &lt;system.web&gt;
        &lt;authentication mode=&quot;Windows&quot;/&gt;
        &lt;identity impersonate=&quot;false&quot;/&gt;
        &lt;authorization&gt;
           &lt;allow users=&quot;*&quot;/&gt;
        &lt;/authorization&gt;
        &lt;compilation debug=&quot;true&quot; strict=&quot;false&quot; explicit=&quot;true&quot; targetFramework=&quot;4.0&quot;/&gt;
        &lt;customErrors mode=&quot;Off&quot;/&gt;
    &lt;/system.web&gt;

Authentication issue when debugging in VS2013 - iis express

I am using windows authentication without impersonation on my company&#39;s intranet website with IIS7.

Under IIS7, what account is used to access the folder which contains my web app using these settings?

Would it be IIS_IUSRS? Or NETWORK SERVICE? Or another I don&#39;t know about?

IIS7 folder permissions for web application

After trying to enable owin &amp; AspNet Identity to my Web Api project (in VS 2013 + .Net 4.5.1) I get the following error in each valid or unvalid(request to none exist controller) requests :

    &lt;Error&gt;
    &lt;Message&gt;An error has occurred.&lt;/Message&gt;
    &lt;ExceptionMessage&gt;
    No OWIN authentication manager is associated with the request.
    &lt;/ExceptionMessage&gt;
    &lt;ExceptionType&gt;System.InvalidOperationException&lt;/ExceptionType&gt;
    &lt;StackTrace&gt;
    at System.Web.Http.Owin.PassiveAuthenticationMessageHandler.SuppressDefaultAuthenticationChallenges(HttpRequestMessage request) at System.Web.Http.Owin.PassiveAuthenticationMessageHandler.&lt;SendAsync&gt;d__0.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at System.Runtime.CompilerServices.TaskAwaiter`1.GetResult() at System.Web.Http.HttpServer.&lt;SendAsync&gt;d__0.MoveNext()
    &lt;/StackTrace&gt;
    &lt;/Error&gt;

As I checked in debug mode, no exception is handled too! Also I realized that `Configuration` in `Startup` class is never called (indeed never caught by the debugger). here is the code for startup :

    [assembly: OwinStartup(typeof(bloob.bloob.Startup))]
    
    namespace bloob.bloob
    {
        public partial class Startup
        {
            public void Configuration(IAppBuilder app)
            {
                ConfigureAuth(app);
            }
        }
    }


No OWIN authentication manager is associated with the request

So I&#39;ve created a new ASP.NET MVC project using the intranet template. web.config contains the appropriate values (e.g. `&lt;authentication mode=&quot;windows&quot;/&gt;`).

If I fire up the web app using the VS webserver, it all looks fine - the page shows my Windows domain and username and all. However, this works in Opera and Safari as well as IE and FF, which says to me it&#39;s not using Windows auth at all (since to the best of my knowledge this doesn&#39;t work in any browser except IE/FF).

Next step is to get it working through local IIS. I create a hosts file entry pointing www.mysite.mydomain to 127.0.0.1. So in IIS I create website with a binding to www.mysite.mydomain and enable Windows authentication and disable anonymous authentication.

I have set up IE and FF to enable Windows auth as follows:

**IE**

 1. Add URL to intranet group
 2. Ensure Windows auth is enabled in the advanced settings

**FF**

 Put &#39;www.mysite.mydomain&#39; into network.automatic-ntlm-auth.trusted-uris config setting.

But when I dial up www.mysite.mydomain in IE / FF I get a login prompt. Interestingly, even when I type in my Windows login here, it still fails and shows me the login prompt again.

We don&#39;t have active directory here but my understanding is that it should work fine with a local account.

I can&#39;t think of anything else I need to do. Any suggestions?

Edit: we&#39;ve recently switched to using Active Directory and the problem remains.

Edit: when I cancel the login prompt, I get taken to an &#39;IIS 7.5 Detailed Error&#39; page with the following information:

&gt;HTTP Error 401.2 - Unauthorized
You are not authorized to view this page due to invalid authentication headers.**

Unable to get windows authentication to work through local IIS

I&#39;m reading about [how to set up windows authentication for my web application on IIS 7][1]. In the description they have Window Authentication as an option in IIS. 
![enter image description here][2]

I have windows authenication turned on for my machine(I&#39;m on Windows 7 Professional 64bit) and I  still don&#39;t see it as one of the authentication options for my web application. Why?  
![enter image description here][3]
![enter image description here][4]





  [1]: http://www.asp.net/mvc/tutorials/authenticating-users-with-windows-authentication-cs
  [2]: http://i.stack.imgur.com/GrCuS.jpg
  [3]: http://i.stack.imgur.com/gnGUx.png
  [4]: http://i.stack.imgur.com/j1KQd.png

In IIS, why doesn&#39;t Window Authentication show up as one of the options for my web application?

How do I connect MS SQL Server using Windows Authentication, with the pyodbc library?

I can connect via MS Access and SQL Server Management Studio, but cannot get a working connection ODBC string for Python.

Here&#39;s what I&#39;ve tried (also without `&#39;Trusted_Connection=yes&#39;`):

    pyodbc.connect(&#39;Trusted_Connection=yes&#39;,
                   driver=&#39;{SQL Server}&#39;, server=&#39;[system_name]&#39;,
                   database=&#39;[databasename]&#39;)

    pyodbc.connect(&#39;Trusted_Connection=yes&#39;, uid=&#39;me&#39;,
                   driver=&#39;{SQL Server}&#39;, server=&#39;localhost&#39;,
                   database=&#39;[databasename]&#39;)

    pyodbc.connect(&#39;Trusted_Connection=yes&#39;,
                   driver=&#39;{SQL Server}&#39;, server=&#39;localhost&#39;,
                   uid=&#39;me&#39;, pwd=&#39;[windows_pass]&#39;, database=&#39;[database_name]&#39;)

    pyodbc.connect(&#39;Trusted_Connection=yes&#39;,
                   driver=&#39;{SQL Server}&#39;, server=&#39;localhost&#39;,
                   database=&#39;[server_name]\\[database_name]&#39;)

    pyodbc.connect(&#39;Trusted_Connection=yes&#39;,
                   driver=&#39;{SQL Server}&#39;, server=&#39;localhost&#39;,
                   database=&#39;[server_name]\[database_name]&#39;)

    pyodbc.connect(&#39;Trusted_Connection=yes&#39;,
                   driver=&#39;{SQL Server}&#39;,
                   database=&#39;[server_name]\[database_name]&#39;)


Connecting to MS SQL Server with Windows Authentication using Python?

I&#39;m running MVC3 and a windows auth web application.  When I deploy to IIS6 it runs great until I hit a page that requires authentication.  It then is auto-redirecting to /Account/Login when I have no trace of that in my application and my web.config is configured to windows auth.

&lt;authentication mode=&quot;Windows&quot; /&gt;

Any ideas?

Here is my entire web.config file: http://pastie.org/1568510


All Windows Authentication Solutions on Gang of Coders

Total of 15 Windows Authentication Solutions