Remove anonymous access from the directory with the IIS management console, the username is available with $_SERVER[“LOGON_USER”].