CODEWITHSUNDEEP
asp.netwindowsauthenticationiis
mfcallahan
mfcallahan

Reputation: 185

What can cause incorrect user names when using IIS & Windows Authentication?

I'm currently experiencing an issue with some users of an ASP.NET 4.8 Web API application hosted on Windows Server 2012 and IIS. The following properties are not returning that user's correct user name, and instead returning the name of a service account used for this server:

I have no idea how to begin troubleshooting this - myself and most other users do not experience this issue, but for a handful of users the above does not return the correct username, returning the username of a service account used to remotely connect to the server in question. Forcing a login via a browser private window does rectify the issue, and the application correctly returns the expected username for each of the above properties.

What could be a cause for Windows Authentication not returning the correct user name and what is the best way to troubleshoot an issue like this?

edit: I was able to resolve the issue, see my answer below

Upvotes: 0

Views: 2547

Answers (2)

mfcallahan
mfcallahan

Reputation: 185

After some additional research and troubleshooting, I determined that the users experiencing the issue described above had the service account in question stored in the Windows Credential Manager:

enter image description here

Removing the service account in question allowed them to be authenticated with the Intranet site with their normal Windows domain\username. As @pcalkins suggested, at some point the affected users had used these credentials on their machine, and Chrome, Edge, IE were using that saved credential when authenticating with the Intranet site.

Upvotes: 4

samwu
samwu

Reputation: 5205

Please check the following steps:

  1. Make sure that windows authentication is enable and Anonymous Authentication is disable for the website.

  2. Enable integrated security in Interner Explorer (Options/Advanced and checkin the "Enable Integrated Windows Authentication" option).

  3. Add your website to Local Intranet zone and select at least "Automatic logon only in Intranet Zone" option under Options/Security Settings/Local intranet/Custom level).

  4. Aake sure the user and application server are in the same domain.

Upvotes: 1

Related Questions