I run a web site (ASP) on the company intranet which I want to restrict
access to. A logon box is necessary since some computers are logged on
with "common" profiles.
Using IIS 6, I have set authentication method to Digest Auth which
communicates with Active Directory as wanted. I've remove anonymous
access and integrated Win auth. I've also set connection timeout to 30
seconds.
My problem is this:
1) User A successfully logs on to the site using his/hers network
password
2) User A leaves the computer without closing ALL Internet Explorer
windows
3) User B enters the site. The login box is pre-filled with user A's
username/password. User B only needs to click OK to enter the site.
I've tried changing the login settings under Authentication in IE, but
this doesn't help.
Is there a way to (preferably programmatically) clear the username and
password for the logon box?