title: ASP.Net web application trying to use Impersonation and Delegation to connect to a File Server
body: <p>I'm trying to use Impersonation and Delegation in an intranet ASP.Net web-app in order to pass authenticated users' credentials onto a File Server so it can write a file to a directory.</p>
  
  <p>The web server and file server are two separate machines, but in the same domain, so Delegation is required.</p>
  
  <p>I've done the following:</p>
  
  <ul>
  <li>Set <code>&lt;authentication mode="Windows"/&gt; and &lt;identity
  impersonate="true"/&gt;</code> in my web-app's web.config. </li>
  <li>Enabled Constrained
  Delegation from the web server to the file server's HOST service and
  CIFS (Common Internet File System, in Active Directory. </li>
  <li>Enabled only
  Windows Authentication in the website, through IIS.</li>
  </ul>
  
  <p>Apparently this should all work, but it doesn't. I am getting ACCESS DENIED when I try to create a folder on the File Server from the Web App.</p>
  
  <p>All the web pages I've read seem to indicate that my setup should work. What am I missing?</p>
  
  <p>Notes:</p>
  
  <ul>
  <li>My username gets passed to the web server fine.  </li>
  <li>I am part of a group
  that has full rights to the folder that I am creating the folder in.</li>
  </ul>