According to this forum on [`WindowsIdentity.GetCurrent().Name` vs. `User.Identity.Name`][1]:

> * `User.Identity.Name` represents the identity passed from IIS.
> * `WindowsIdentity.GetCurrent().Name` is the identity under which the thread is running.


Depending on your app's authentication settings in IIS, they will return different values:



<pre><code>| <a href="https://msdn.microsoft.com/en-us/library/xh507fc5.aspx">Anonymous</a> | <a href="https://msdn.microsoft.com/en-us/library/aa292114.aspx">Impersonate</a> | User.Identity.Name | WindowsIndentiy.GetCurrent() |
|-----------|-------------|--------------------|-------------------------------|
| Yes | True | Empty String | IUSR_&lt;machineName&gt; |
| Yes | False | Empty String | NT Authority\Network Service |
| No | True | domain\user | domain\user |
| No | False | domain\user | NT Authority\Network Service |
</code></pre>

**Legend**:

* Where **domain\user** will show up as:
 * domain\user for Active Directory
 * machineName\userName for local account
* Where **NT Authority\Network Service** will show up as:
 * NT Authority\Network Service for Windows Server or ASP.NET
 * machineName\ASPNET_WP for Windows XP

[1]: http://forums.asp.net/t/1507047.aspx

What's the difference in an asp.NET environment with Windows Authentication and Identity Impersonation turned on, between HttpContext.Current.User.Principal and WindowsIdentity.GetCurrent()?

HttpContext.Current.User.Principal vs WindowsIdentity.GetCurrent()

It's interesting that you're seeing it as a `[Hashtable]`. I see it as a `[Microsoft.Iis.Powershell.Framework.ConfigurationElement]`.

It has a method called `.UpdateCollection()` which expects a `[PSObject[]]`, so it's looking for an array of objects.

The thing is, calling that method, whether on a pool object returned from `New-WebAppPool` or from `Get-Item IIS:\AppPools\ExistingPool`, results in an error stating that it's read only.

I tried replacing the entire `.Collection` with a new arraylist with timespan objects added to it, and I got no errors, but it didn't set the values.

I also tried creating a ConfigurationElement object, but it seems to have no constructor, so it's probably a private class somewhere in the code.

I'm not saying there's _definitely no way_ to do it like you want, but it seems like you'll be best off just using `Set-ItemProperty` as it seems that some of these attributes were designed to be updated only through the PS Provider.

I'm trying to set the [`periodicRestart`][1] property using a powershell script, but I'm trying to use a slightly different syntax than what I've seen in code samples.

Here's one way to do according to [Set the specific times to recycle an application pool with PowerShell][2]:

    Clear-ItemProperty $iisAppPoolName -Name Recycling.periodicRestart.schedule
    Set-ItemProperty   $iisAppPoolName -Name Recycling.periodicRestart.schedule `
                                       -Value @{value="01:00:00"}

However, I already have a block of code where I'm setting properties on the `$appPool` itself like this:

    $appPool = New-WebAppPool $iisAppPoolName 
    $appPool.managedPipelineMode = "Classic"
    $appPool.managedRuntimeVersion = "c4.0"
    $appPool.recycling.periodicRestart.time = [TimeSpan]"00:00:00"
    $appPool | Set-Item

Which works fine, so I'd like to add the following line:

    $appPool.recycling.periodicRestart.schedule = @{value="01:00:00"}

But I can't get the syntax for `@{value="01:00:00"}` to take.  The `schedule` property is expecting a hashtable which is what I'm passing it.

![example][3]

Any ideas?

[1]: http://www.iis.net/configreference/system.applicationhost/applicationpools/add/recycling/periodicrestart
[2]: https://habaneroconsulting.com/insights/Set-the-Specific-Times-to-Recycle-an-Application-Pool-with-PowerShell#.VcEkn_lVhBc
[3]: http://i.imgur.com/JEELNL0.png

Powershell App Pool set periodicRestart syntax

You cannot modify XHR requests coming back from the ASP.NET. Doing so would be to attempt a Man In The Middle Attack (which your proxy is acting as), but Microsoft has good reason to prevent.

Here's a dummy message to explore the syntax ASP.NET uses in the response:


 1|#||2|52|updatePanel|ctl00_mainContentPlaceHolder_firstUpdatePanel|
 New Content For First Update Panel 

The header starts with `1|#| |` and then the number of updates in the rest of the message (2) 
Then each update section follows the pattern: 

 |char_len|update_type|id_of_field_to_update| 
 New contents to insert into field

The `len` in each section must exactly equal the number of characters to follow. So finding and replacing content in these messages is extremely fickle.

The best recommendation is to simply return a relative URL that is server agnostic so the client can be redirected relative to their current domain.

When going through a proxy server (A), any self-referential links sent from the apps server (B) need to be re-written to use the proxy as a host instead.

Here's an example:

Response from (B) contains: <code>&lt;a href=&quot;http://apps/path&quot;&gt;path&lt;/a&gt;</code> 
Proxy (A) needs to rewrite as: <code>&lt;a href=&quot;http://proxy/path&quot;&gt;path&lt;/a&gt;</code>

Normally, this is done by creating an outbound rule that inspects html responses for tags that contain urls, looks for references to to the apps server, and rewrites them. 

**Here's a normal rule** [*GUI version*][1]: 



 <outboundRules>
 <rule name="Outbound Links" preCondition="IsHTML" enabled="true">
 <match filterByTags="A, Form, IFrame, Img, Input, Link, Script" pattern="(https?:\/\/proxy|^)\/(.*)" />
 <conditions logicalGrouping="MatchAll" trackAllCaptures="true" />
 <action type="Rewrite" value="http://apps/{R:2}" />
 </rule>

**Where `IsHTML` is defined as**:



 <preConditions>
 <preCondition name="IsHTML">
 <add input="{RESPONSE_CONTENT_TYPE}" pattern="text\/html" />
 </preCondition>

**The problem** is that some of the page content is returned via an XHR request. Minimally, this fails the HTML precondition.

[![Content Type - text/html vs XHR][2]][2]

 but I can expand the rule to also include content types of `xhr`

However, URL Rewrite still has trouble **parsing** the returned text into tags because it is not valid HTML. 

Here's an example of what the response looks like:



 |6383|updatePanel|ctl00_mainContentPlaceHolder_contentUpdatePanel|
 
 <div id="ctl00_mainContentPlaceHolder_resultsPanel">
 <a href="http://apps/path">path</a> 
 </div>

 ...
 
 |0|hiddenField|__EVENTTARGET||0|hiddenField|__EVENTARGUMENT||0|hiddenField|

However, when I do this, I get the error:

> **Sys.WebForms.PageRequestManagerParserErrorException**: 
The message received from the server could not be parsed.

 [1]: http://i.stack.imgur.com/Eaewx.png
 [2]: http://i.stack.imgur.com/Wd0n8.png

Match the content within a tag from a Non-HTML response in URL Rewrite

1. Open IIS and navigate to your web site or application and go to the SSL settings

  [![IIS Settings > SSL Settings][1]][1]

2. Set the Client Certificate setting to "Ignore"

  [![SSL Settings > Client Certificates][2]][2]

  Both 'Accept' and 'Require' will both challenge for a client side cert

3. Recycle your app pool and re-launch your browser to test

**Note**: SSL settings are inherited from your Site > Application, so you may need to apply these SSL Settings at multiple levels


**Further Reading**:

* [Why does google chrome prompts to "select a certificate to authenticate yourself"](https://stackoverflow.com/q/26382109/1366033)
* [How to prevent browser from prompting for a client certificate and allow the IIS to accept it (not require it)?](https://serverfault.com/q/667285/176522)

  [1]: https://i.stack.imgur.com/sfJ0K.png
  [2]: https://i.stack.imgur.com/MqByP.png

We have an application deployed to IIS and every time we connect to it, we get the following browser prompt:

> Select a certificate to authenticate yourself to *sitename*

[![Select a Certificate prompt][1]][1]

We do not have a reason to challenge for a client certificate and seems like this setting was introduced by mistake

How can we remove it?

**Research**:

* This question on [How can I prevent browsers from prompting Users for a Client Certificate?](https://stackoverflow.com/q/54292661/1366033) looks similar, but doesn't have an answer yet, and also is about setting this up on [tag:kestrel-http-server]

* This question on [Browser is not prompting for a client certificate](https://stackoverflow.com/q/15014288/1366033) is for how to *make sure* there is a prompt, and didn't provide enough hints as to how to prevent one

  [1]: https://i.stack.imgur.com/K9zG8.png