HttpContext.Current.User is null even though Windows Authentication is on

Question

In IIS7 under Windows Server 2008, I have a virtual directory with anonymous access off and Windows authentication on. In my web.config, I have:

<authentication mode="Windows"/>
<authorization>
      <allow roles="MYGROUP"/>
      <deny users="*"/>
</authorization>

and

<system.webServer>
    <!-- IIS7 security settings -->
    <security>
     <authorization>
       <add accessType="Deny" users="*"/>
       <add accessType="Allow" roles="MYGROUP"/>
     </authorization>
    </security>
</system.webServer>

Yet when I access default.aspx from IE and set a breakpoint in Global.asax.vb Application_AuthenticateRequest(), I get a null HttpContext.Current.User where I am expecting my own identity. It is almost as if Anonymous Access is on?

What can I do to troubleshoot this? Everything seems to work in IIS6.

Answer 1

II7 has integrated authentication. You can set it back to the old type by changing the Application Pool back to classical in the basic settings in IIS.

*Caution this is just an explanation and example, you may want to use the integrated authentication and do something different.

Answer 2

Having the same problems , can anyone shine some light?

Answer 3

The Same issue IIS 7
WIndows 7 64 vs2010

Answer 4

Anonymous access must be on if you don't use ssl or something your own security.