Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Someone in our desktop support department has a strange issue. He logs into his PC using his normal account (domain\UserA), but when accessing an internal ASP.Net web site using IE 7, the IIS and application logs show that he's accessing the app as domain\UserB.

The app he's logging into has extremely low usage, and we've ruled out that someone else is logging in and confusing things. So far he's the only user with this problem (out of ~1000).

He's on a Windows XP machine, using IE 7, logging into a Windows 2000 Server running IIS (the web app is ASP.Net 2.0).

I'm curious if anyone can suggest how this might be possible. I've been in IT and software development in one form or another for almost 12 years, and I've never seen a case where a user could login as themselves, but "accidentally" get the privileges of another user.

Note also that this user might be considered a "power user" (he's in desktop support).

share|improve this question
up vote 0 down vote accepted

Crazy Theory #1: Another user logged into the web application from his desktop and selected to option to save his username and password for future visits. Have you tried clearing saved usernames and passwords?

share|improve this answer
He re-imaged his PC before I could verify, but I'm betting that's what happened. Thanks! – CodeToaster Oct 16 '09 at 19:31

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.