Hi.

I'm trying to work with impersonation at the moment, but I'm really confused about somethings.

1.) In the web.config I write <identity impersonate="true"/>. I'm using IIS and there the option integrated windows authentification. If I write something into the web.config like

  <location path="file.aspx">
    <system.web>
      <authorization>
        <allow users="Username"/>
        <deny users="?"/>
      </authorization>
    </system.web>
  </location>

  I'm not able to call the file after I logged in to the page. From my understanding at this point the user trying to see the page isn't anonymous, because impersonate is true. On the other side it's no problem to transfer the same file via server.transfer if impersonate is false... Where is my mistake?

 2.) Is there a possiblility in ASP.NET or IIS to not manually log in, but be logged in automatic with one's Windows-Account?

3.) When it comes to switching to impersonation programmatical it's no problem to impersonate in one function. But what I'm trying to do is, to impersonate programmatical till the next file from my server is called and then undo the impersonation. How is that possible?

 

Thanks so far

Basti