Hi, hopefully someone can help me out...
I've got a site in IIS 7 using Windows Authentication (Anonymous is disabled).
Whenever I get a 401.1 on the site, the IIS logs don't register the domain\username which the request failed for? It seems to log it as an anonymous request as I get a hyphen.
E.g.
2015-06-17 14:14:25 [SERVER] GET / - - [IP] Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:38.0)+Gecko/20100101+Firefox/38.0 - 401 2 5 6357 297 249
2015-06-17 14:14:30 [SERVER] GET / - - [IP] Mozilla/5.0+(Windows+NT+6.1;+WOW64;+rv:38.0)+Gecko/20100101+Firefox/38.0 - 401 1 3221225581 6597 571 46
Is it actually possible to log this information?
Many thanks