I'm writing an asp.net intranet application that allows the current user to
manage their user folder on a shared network drive on the same domain as the
webserver.  These user folders have permissions set up for the current user.

From what I understand about IIS/Integrated Windows Authentication, it
doesn't support delegation, that is passing an authentication token to a
server beyond the webserver (like this network share).  Any access beyond
that "one-hop" would be executed under the configured identity of asp.net.

Is there a way, from code perhaps, to beef up the token IIS receives from
the browser (that has been authenticated by Integrated Windows), so it can
overcome the one-hop rule, and access a network share that has permissions
set for the current user?  I know this problem is easily solved with using
basic authentication, but I don't want the user to have to re-enter their
username/password in the webpage.

I just want it so authenticated user "joe" can access this shared network
folder because there are permissions set for "joe", not because I've done
some crazy process to change the identity asp.net runs under.  It seems
silly that there wouldn't be a way to do this!

Please help!
--Michael