IIS 6.0 and ASP.NET 2.0 Credentials--Part Two
The ASP.NET User Principal (HTTPContext.User) clearly depends upon the Authentication Mechanism that you selected in IIS 6.0 "Authenication Tab" and if you use Integrated Windows Authentication then it is dependant on the IIS impersonation token that get handed off in the extension control block via the ASP.NET 2.0 ISAPI API. Part two of
IIS 6.0 and ASP.NET 2.0 credentials is now complete at the
S4CD blog site.. This now ties in ASP.NET Principal Object and how it relates to the the OS thread and the impersonate token.