Author: sudhanshu.mishra | Posted on: 9/29/2009 1:39:38 AM | Views : 345

Hi,
This is about an issue I faced and seem to have resolved - although not sure how:
I have an ASP.NET site using .NET 3.5. I intended to use Windows authentication for this site so in IIS for the virtual directory, the security setting was set to "Integrated Windows Authentication" under the "Directory Security" tab. On the virtual directory for the site, the NTFS security had the following access:

IIS_WPG group - Full Control
Managers group (Custom local group) - Full control

The web.config file was set to <authentication mode="Windows"> and authorization was configured as follows:
<authorization>
   <deny users="?"/>

</authorization>
So far so good. When I deployed this app on the production server, users trying to access the site using IE were prompted for authentication even after successfully authenticating using their logged in cr ...

Go to the complete details ...