We have a web application (ASP.NET MVC) installed on IIS for one of our clients with Windows Authentication enabled.
The authentication is working perfectly but the problem is at the authorization level. The authorization type is role-based authorization.
So we have three levels of authorization: MISV_Administrator MISV_Normal MSIV_Readonly
If we create these groups locally on the same machine where IIS and our web application are installed and assigns domain users to them then the users are able to access our application. But if we create these same groups in the active directory as domain global groups and assigns the users to these ones instead then now the users receive an unauthorization error.
Both machine, the Active directory server and the IIS server are on the same domain.
So I don't understand why it's working locally but not with the global group?