I'm sure this is a really simple question but all the resources available regarding Windows Authentication seem to be leaving out an important part. Do I have to include users and/or groups in the permissions on the site in IIS?
My web.config file has the following:
<system.web>
<compilation targetFramework="4.5" />
<httpRuntime targetFramework="4.5" />
<authentication mode="Windows" />
<authorization>
<deny users="?" />
</authorization>
</system.web>
So I'm expecting users who are already logged into the domain to be able to access the intranet site. However, only myself and another user who has Administrative rights can access the site. I am listed as an allowed user as well as IIS_IUSRS is also listed.
I know in the future we will probably lock down the site and the I will pro ...
Go to the complete details ...