I have IIS 5.0 configured for Challenge/Response and a password reset page using prjAdmin.dll.
I have the same ASP page on another site using anonymous access.

The password resets on the anonymous site are performed with my ID.

When I log into the Challenge/Response site with the same ID on the same server and run the ASP, my ID is denied access when using prjAdmin.dll to reset the password.

So it seems that the Chllenge/Response determines if I get to the page or not, but when the actual script executes, it uses another account. ( I am guessing it is the system due to a threading model issue.)

Can anyone help so that I can use the account derived from the challenge response to create the prjAdmin object for resetting the password as I do not want to allow anonymous access?