I'm missing a key concept as to how windows authentication should work. IIS is enforcing authorization? It seems in my development environment that since I am setup in a group with access to the server that all of my authentication and authorization works as it should. When I released the site to our test server and some other users, they get page cannot be displayed messages or access is denied. We tried adding our domain group with read access to the server and then everything works as it should. Is there a way around this without giving all of our users NTFS access on the web server?
I have authentication set to windows
authorization is set to allow users = "*"
Integrated windows authentication is checked and anonymous is unchecked.
Web server logs show File authorization failed for the request for everyone but administrators and the developers.
Since I'm working on the intra ...
Go to the complete details ...