Hey John,
Thanks for your help - I think I made this way too complex with a poor selection of words.
Basically, all I was trying to do is have a
VB.NET application on the client computer ('workstation') talk to a server application and the server application know the name of the user who is logged in on the workstation.
I wanted to do this with out the user having to enter their password AGAIN (because they are already logged into the network / windows, so I though I might be able to find out what useraccount they are running the client application under?)
I found something in IIS that does this with Internet Explorer, called "NTLM Authentication" or "Windows Integrated Authentication". It's awesome, as long as your server is in the Trusted Zones (which I can adjust via Group Policy).
I gave up on
VB .NET and have started rewriting the application specifications to be a web-based ASP.NET application so I can simply use "Windows Integrated Authentication" and call the Request.ServerVariables("LOGON_USER") method.
But, the question may still be valid for other people out there - is there a way to do a similar thing in
VB .NET?
Cheers for your input!
Ben
PS: What I was talking about Fred getting Bob's credentials is just Fred hacking the TCP/IP message accross the network and substituting "My name is Domain\Fred" with "My name is Domain\Bob".