You want LOGON_USER.

This is the Windows account that the user is impersonating while connected to your Web server.

There is extensive information on this here.