PRB: Request.ServerVariables("LOGON_USER") Returns Empty StringID: Q188717 
  | 
Accessing the Request.ServerVariables("LOGON_USER") variable from Active Server Pages (ASP) returns an empty string.
The LOGON_USER variable is not populated if the ASP page is accessed using
Allow Anonymous security.
In order for the LOGON_USER variable to be populated, the user must be
authenticated using either Basic or NT Challenge/Response security.
This behavior is by design.
For additional information, please see the following article in the
Microsoft Knowledge Base:
Q142868 IIS: Authentication & Security Features
Additional query words: allow anonymous LOGON_USER ASP ServerVariables Request kbASP
Keywords          : kbASP kbASPObj kbScript kbSecurity kbVisID kbGrpASP 
Version           : winnt:
Platform          : winnt 
Issue type        : kbprb 
Last Reviewed: May 27, 1999