How

Compatibilty Mode

How to override IIS compatibilty mode

<system.webServer>
    ...
    <httpProtocol>
        <customHeaders>
            <remove name="X-UA-Compatible" /> <!-- in case it was already set -->
            <add name="X-UA-Compatible" value="IE=edge" />
        </customHeaders>
    </httpProtocol>
</system.webServer>

Time-out, Session Expried

Why is the IIS default app pool recycle set to 1740 minutes?

Security

To get login account

((System.Threading.Thread.CurrentPrincipal).Identity).Name

To get execution account

System.Security.Principal.WindowsIdentity.GetCurrent().Name

The first thing that the HttpApplication object does when it acquires a thread is to set the thread's principal to the HttpContext's principal. This syncs up the principals.

System.Web.HttpContext.Current.User

HTTPS

5 ways to implement HTTPS in an insufficient manner (and leak sensitive data)

5 ways to tackle an insufficient HTTPS implementation

Implementing HTTPS Everywhere in ASP.Net MVC application