YOu need to tell IIS not to allow anonymous users. Otherwise that CGI var is blank. All that variable is is the domain/username they logged in with.
-----Original Message----- From: Chiu, Amy [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 15, 2003 1:45 PM To: CF-Talk Subject: How to avoid inranet logins Can someone help me with this one: Our setup is: Windows 2003, IIS6, ColdFusion 4.5 and clients have Windows XP Our intranet applications currently maintain it's own id/password in a Access database and users have to log into our intranet applications in addition to their morning login. We would like to grab their network username and password and use these values to assign access to our various applications. This is the part I'm having trouble with. I've done some reading and it looks like it may have something to do with a CGI variable call auth_user. But my auth_user is blank. What do I need to configure to have this variable populated? Furthermore, if this variable is populated, does that mean the user has been authenticated against Active Directory? Any help would be greatly appreciated. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Your ad could be here. Monies from ads go to support these lists and provide more resources for the community. http://www.fusionauthority.com/ads.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4

