Authentication IIS / ASP.NET - Problem

From: aaapaul (paul.kasparbauer_at_vit.linhardt.com)
Date: 10/31/03 

Date: 31 Oct 2003 00:50:53 -0800

1) I have an intranet .
   <Directory>Intranet
   with <Subdirctory>admin
   and <Subdirctory>database with an accessdatabase (data.mdb)

   I have 2 NT-Groups
   a) NT-Group "read" can read data in all directories
   b) NT-Group "change" can read and write data in all directories

Only the group "change" should be allowed to change data in data.mdb
The files for changing data are in the <subdirctory>admin

2) I am only using Windows-Authentication in IIS
3) In ASP.NET I use authentication mode="Windows"

This is my web.config:

<?xml version="1.0" encoding="utf-8" ?>
<configuration>
     <appSettings>
        <add key="ConnectionString1"
value="Provider=Microsoft.Jet.OLEDB.4.0;" />
        <add key="ConnectionString2" value="_datenbank/daten.mdb" />
    </appSettings>
  <system.web>
     <compilation defaultLanguage="vb" debug="true" />
     <customErrors mode="Off" />
     <authentication mode="Windows" />
    </system.web>
</configuration>

With this configuration I thought only the group "change" can change
date in the Access-database, but other users from the group "read" can
change Data too !

Why? Do you have any solution ?

Thanks
aaapaul

P.S.: Is it a problem with the user ASPNET ? Does he access the
database - Had I to change the connectionstring ? - Integrated
Security = sspi etc. ?