Here's my problem. I have an ASP.Net C# website sitting on a webserver that is a member of my domain, but which is also located within a DMZ and is visible across the Internet. The web application was originally written to utilize Forms Authentication, and simply verifies that users are members of our local Active Directory. All of this currently works fine.
We have received a request from the PHB to mimic Windows Authentication behavior for this web application when local intranet users attempt to access it. We use Windows Authentication on many of our Sharepoint and .Net intranet applications, and our users like the behavior. Because the server is a member of our domain (and because we have a GPO specifically adding it to our local Intranet security group), it would be fairly trivial to just activate Windows Authentication and automatically log local users in, but PHB has decreed that we must maintain our "user friendly" browser ...
Go to the complete details ...