Access denied when using active directory groups and windows authentication

From: David (dtoyer_at_hotmail.com)
Date: 11/02/05


Date: 1 Nov 2005 18:08:23 -0800

Hi, I am trying to configure my app using windows authentication. I
would like to limit access to an Active Directory group but do not want
to implement impersonation. I've setup the config section as follows:

<authentication mode="Windows" />
<authorization>
   <allow roles="domainname\groupname" />
   <deny users="*" />
</authorization>
 <identity impersonate="false" />

I am being prompted for user credentials, however, it is not letting me
in with a valid account. If I change the config section to limit to an
Active Directory user only, example: <allow users
="domainname\username" />, this setting works just fine. It's very
frustrating and I'm hoping I won't need to open a Microsoft Support
ticket. Any suggestions are greatly appreciated.

David



Relevant Pages