>Hi,
>
>Some of you may have seen a couple of threads I created where I am trying to make my ASP.NET page to read the domain username who is currently logged into PC. It does not work by default.
>
>So, I asked the customer IT guy to create a domain account and give me credentials so that I can impersonate this account and make my ASP.NET page run with the credentials of this account. The IT guy did that and I set up impersonation (in web.config file). He created account TestAcct. I impersonate that account as DomainName\TestAcct and entered password. But then when I run the page, I get an error:
>

>Could not created Windows user token for the credentials specified in the configuration file.  
>The referenced account is currently locked out and may not be logged on to
>

>
>Then I tried to set up impersonation for a couple of other valid domain usernames/accounts that this organization has. And the same error message. So, I am doubtful the the account is really locked.
>
>Any ideas of where I should look for? Or tell the IT guy to look for?
>
>TIA for any input.

Is your PC set up as a computer within the customer's domain? If not, I'd expect to see a lot of problems relating to security.

https://stackoverflow.com/questions/997001/can-i-impersonate-a-user-on-a-different-active-directory-domain-in-net
https://security.stackexchange.com/questions/116133/impersonating-a-computer-in-a-windows-domain

of course, if you're trying to do this through the Web... I'm apt to think this will add even more complexity.