> Hi
>
> I have a web application that uses Windows integrated security. In
> some cases (approval scenarios that requires high security) i need to
> prompt the user for a new domain login, even though they already
> authenticated.
>
> I've tried redirecting the request so there's a zone change. This will
> prompt the user for a login the first time, but not the following
> visits.
>

"Dominick Baier" wrote:

> why don't you use a username/password HTML form that and verify the credentials
> manually using Win32 LogonUser?
>
>
> -----
> Dominick Baier (http://www.leastprivilege.com)
>
> Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp)
>
> > Hi
> >
> > I have a web application that uses Windows integrated security. In
> > some cases (approval scenarios that requires high security) i need to
> > prompt the user for a new domain login, even though they already
> > authenticated.
> >
> > I've tried redirecting the request so there's a zone change. This will
> > prompt the user for a login the first time, but not the following
> > visits.
> >
>
>
>