under IIS, you can manage the authentication by setting the Windows Integrated Authentication. This will let IIS require a windows username and password. You set up the 'read/execute' access on the index.php file to the Windows groups or users that you like. this is a very easy way for intranet pages. depending on the browser settings, users won't even need to type their windows login/password : it will be directly sent by the browser and used by IIS to get access to the pages. In PHP, you can get back the windows login into a $_SERVER['xxx'] variable vincent -----Original Message----- From: Aspen Olmsted [mailto:aspen.olmsted@xxxxxxxxxxxx] Sent: Wed 6/12/2006 18:06 To: php-windows@xxxxxxxxxxxxx Subject: Getting user on iis with "WWW-Authenticate: Negotiate" I have "WWW-Authenticate: Negotiate" working on IIS 5.1 and php 5.2 in isapi mode but I can not figure out how to determine the user name that was used. The When I decode $_SERVER['HTTP_AUTHORIZATION'] I get NTLMSSP: $_Server[base64_decode(substr($_SERVER['HTTP_AUTHORIZATION'],10))] I have the same issue with WWW-Authenticate: NTLM authentication Thanks, Aspen -- PHP Windows Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php -- PHP Windows Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php