Hi!

Question:
I want to make a login form at the Clickonce deployment webpage, and only allow the authenticated users to download the application. and I want the downloaded application to use the same credentials entered at the webpage, without prompting the users to enter the credentials again.

Details:
I have an application(Windows Client) which needs customized settings for different users. the application is deployed through ClickOnce.

Currently, the users are given the ClickOnce webpage URL, then download the application from there. after download and running the application, the application prompts users with a login form. If their credentials are authenticated, the application loads the customized settings from the server's database according to the credentials given.

The problem is, any unauthenticated users can download the application if they just know the ClickOnce deployement webpage's URL.

Unauthenticated users won't be able to run the application anyways, because the application asks for credentials when started, but I want to prevent the unauthenticated users from downloading the application at all.

Am I asking the wrong question maybe? Your help is much appreciated!