Did you have set the windows authentification on the IIS server before or is it anonymous logon where everybody can open your application ?If it is not set you're always gonna get an empty string for the user.