The security settings for IIS are set to anonymous access for your web site.
Change them to authenticated access.  The AUTH_USER and LOGON_USER variables
will then be populated.

(Make sure anonymous access is not checked.  IIS will just use the anonymous
account and forget about the authentication if both are selected.  I
think...this may have been only in IIS4.)

-Jeff

-----Original Message-----
From: Kevin L. Reed [mailto:kevin_reed@d...]
Sent: Friday, December 08, 2000 4:04 PM
To: Security_asp
Subject: AUTH_USER, LOGON_USER in server variables collection


I am trying to determine how these afore mentioned server variables get
populated. I ran the servvars.asp with a listing of all of the variables,
and for my production server, it returned my NT account/password but my
development area has nulls for these values. How does this variable get
populated and what controls that population.  I'm fairly new to this and
I'm having to re-engineer an app in development

Regards

Kevin