We have an IIS website that we are trying to permit a certain AD group to access. The web.config file looks like this:
<authentication mode="Windows" /> <authorization> <allow roles="mydomain.com\group1, mydomain.com\group2, mydomain.com\group3" /> <deny users="*" /> </authorization>
So the user that we're working with is only in Domain Users and group3. With this setup, the user is asked for its login and can never authenticate. If we move the user to group1 or group2, they can authenticate. We have another site where Domain Users are allowed and this user CAN get into that. We moved another user into group3 and they had the same problem. Is there something that we may still need to configure with this group?