Comments on: Can I call upon the username of someone logged into the pc, and use it in a web link?

By: buddyfarr

buddyfarr — Fri, 22 Feb 2008 02:37:53 +0000

cwillit –

can you tell me how you setup that $HOME environment variable? is it assigned in the login script or part of a group policy?

By: cwillott

cwillott — Mon, 28 Aug 2006 12:44:14 +0000

One more approach would be the use of environment variables. Each user at our company has a set of environment variables set up on their PC during bootup. One of the environment variables is $HOME which refers to a folder on a server that is specific to their username.

By: mortree

mortree — Sun, 27 Aug 2006 19:21:13 +0000

Yes as MrSamm said, you can do that serverside from the authorized logon name if you use individual NT authentication for access to the webserver. That can be pretty transparent to the end user if set up correctly. Without user by user NT authorization the logon name won’t be matched to the domain user viewing the site (most likely the anonymous service account for that site to everyone).

What you originally asked about doing things client side can also be done — but shouldn’t. By default IE and other web browsers are configured to avoid allowing such things so that websites can’t perform malicious acts. So invoking %username% clientside is actually a marked lowering of security. It has been a while so I am not sure it is easy to do that just for a given Intranet website as oppsed to having more global effects on all websites. You’d need to research that. However you should still avoid that if the Intranet server also serves external Internet uses as many multipurpose webserver do. It is possible that an external breach could leapfrog to a breach of internal users even though the websites were originally sepearately configured.

By: ciro711

ciro711 — Fri, 25 Aug 2006 18:51:01 +0000

Try this servername%username%