We have an IIS website that we are trying to permit a certain AD group to access. The web.config file looks like this:

<authentication mode="Windows" />
  <allow roles="mydomain.com\group1, mydomain.com\group2, mydomain.com\group3" />
  <deny users="*" />

So the user that we're working with is only in Domain Users and group3. With this setup, the user is asked for its login and can never authenticate. If we move the user to group1 or group2, they can authenticate. We have another site where Domain Users are allowed and this user CAN get into that. We moved another user into group3 and they had the same problem. Is there something that we may still need to configure with this group?

  • Probably help to specify what type of group is group3. – Greg Askew Jul 11 '20 at 13:51

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.