Security for ASP.NET application running on intranet / VPN
- by Ryan
Hi,
I have an ASP.NET app that sits on our intranet, using the WindowsIdentity to identify the user:
WindowsIdentity wi = HttpContext.Current.User.Identity as WindowsIdentity;
if (wi == null || wi.Name == null)
{
noAccess("No WindowsIdentity");
return;
}
string username = wi.Name;
if (username.Contains("\\"))
username =…