Question

Is there a way to allow site wide access to my intranet site based on an AD group without having to use the [Authorize] attibute on every controller?

I am using Windows Authentication.

Answer 1

You can add the AuthorizeAttribute to the global filters collection, as described here.

public static void RegisterGlobalFilters(GlobalFilterCollection filters) {
    filters.Add(new AuthorizeAttribute());
    filters.Add(new HandleErrorAttribute());
}

It is usually not a good idea to use the Web.config authorization element for this since this restricts file-based access. But when you protect your entire site, using the Web.config file will work just as well.