Hi.
We are currently encountering the following issue with IIS 7 (Windows Server 2012 R2) and a web application:
Within this application we make use of the ServerVariable LOGON_USER. The content of this server variable is further used for loading the web application customized according to the windows user currently logged-in on the machine accessing the web application. However, we just realised that LOGON_USER variable is not always populated. For the mentioned application in the IIS "anonymous authentication" is enabled and "windows authentication" is disabled. Only for the "Default.asp", which is accessed when starting the web application, "anonymous authentication" is disabled and "windows authentication" is enabled.
When the web application is accessed using Default.asp, the ServerVariable LOGON_USER is not populated. When accessing the web application over an other asp-file (called MB.asp) that checks for certain session variables to be populated and redirects to Default.asp if they are not, the LOGON_USER gets populated.
Long story short:
- If accessing the web application directly via Default.asp --> LOGON_USER is not populated and remains empty
- If accessing the web application via MB.asp that redirects to default.asp --> LOGON_USER gets populated
Question:
- What exactly might cause this behavior? Any hints would be highly appreciated.
Thanks.