Question

I have developed an MVC intranet application which I have successfully deployed to IIS.

I have enabled Windows Authentication and denied access to anonymous users, however, only some accounts on the domain are able to gain access to the application.

I have checked these accounts and there is nothing special about them that I can see.

The first check for security is Domain Users which everyone is a member of.

All other users are prompted to login but it does not recognize their credentials.

I get a 401.1 – Unauthorized Error

Not sure what else to try. Any suggestions would be appreciated.

Answer 1

Solution : Folder permission on my wwwroot – Domain Users did not have read access.

=================================================================================

Check that kernel mode authentication is on:
Site>Authentication>Windows Authentication>Advanced Settings

Check authorization rules are not blocking users:
Site>Authorization Rules

I would test (allow all users) first, does that allow users through?