In iis with integrated windows authentication to secure the server

This topic includes a code example that displays the current Windows identity of the ASP. NET application. Windows networks that have been configured appropriately with Kerberos authentication are able to do this. However, depending on the settings in the identity configuration element, the Windows identity established on the operating system thread for ASP.

To impersonate the Windows identity supplied by IIS, set the impersonate attribute of the identity configuration element to true as shown in the following example:.

By default, other IIS security modes used in conjunction with the identity configuration element settings will not result in a token that can authenticate to a remote SQL Server. The anonymous user account can be used to authenticate against a remote SQL Server. However, the default anonymous user account is a local machine account and thus will not exist as an account on the remote SQL Server. You can change the IIS anonymous account to use a domain account, or you can mirror the local machine account on the remote SQL Server by creating a local account on the remote SQL Server with the same user name and password.

Additionally the LogonMethod metabase property for IIS6 must be set to an option that allows credentials to flow across the network. This browser is no longer supported. Download Microsoft Edge More info. Contents Exit focus mode. Is this page helpful? Please rate your experience Yes No. Any additional feedback? Submit and view feedback for This product This page.

View all page feedback. Modification of the allowtgtsessionkey registry setting is required by Microsoft to work with Kerberos security. For information on the implications of modifying the registry setting and steps to modify the registry setting, see the following Microsoft documentation:.

The documentation below is produced by a third-party vendor and thus is subject to change. MicroStrategy makes no guarantee on the availability or accuracy of third-party documentation. If your Intelligence Server is hosted on a Windows machine, you must configure the krb5. This file is included with an installation of MicroStrategy Web, and can be found in the following directory:. Do not use any special characters when installing or configuring Kerberos.

Once you locate the krb5. The content within the file is shown below:. You must configure the krb5.