I'm using Windows authentication mode in my application. Here are my setup in web.config under root <identity impersonate="true"/> <authentication mode="Windows"/> <authorization> <deny users="?"/>