I have a web application that must use Windows Authentication.This same application runs in a kiosk type PC where the NT useris "kiosk". Users with no NT account access the application fromthis kiosk as the "kiosk" user.What needs to happen, is if the application is being run from thekiosk (hence "kiosk" user is logged in), IIS prompts for a user nameand password to authenticate as a different user.I was able to accomplish this by setting deny="kiosk" in myweb.config so that if kiosk was logged in, it would prompt for username and password. This works great.The problem now, is that if a user logs in on the kiosk as adifferent user, and neglects to close the browser, the user thatlogged in will leave his/her session running introducing a securityhole.In Forms Authenticaion, logging off an existing user is trivial, butI cannot seem to find similar functionality for WindowsAu ...
Go to the complete details ...