title: IsInRole returns false for workgroup roles
body: <p>I'm building an ASP.NET MVC4 Razor application and I'd like to use Windows authentication to restrict access to various functions to users who are members of specific Windows groups.  I'm developing on a Windows 8 VM (named MYVM) which is not domain-joined, but the app will be deployed on a Win2008 server which will be domain-joined.</p>
  
  <p>I've configured web.config as follows:</p>
  
  <pre><code>&lt;authorization&gt;
    &lt;deny users="?" /&gt;
  &lt;/authorization&gt;
  &lt;roleManager enabled="true" defaultProvider="AspNetWindowsTokenRoleProvider"/&gt;
  </code></pre>
  
  <p>Authentication works - @User.Identity.Name displays "MYVM\MYUSERNAME"</p>
  
  <p>However, although I've added my account to a couple of Windows Groups, calls to @User.IsInRole("GROUP_NAME") always returns false.</p>
  
  <p>I suspect this is because my development VM is not domain-joined.  Does anyone know if Windows auth in ASP.NET MVC works with workgroup roles as well as domain roles?</p>
  
  <p>EDIT</p>
  
  <p>I've found out that I can enumerate the roles - this gives:</p>
  
  <pre><code>?System.Web.Security.Roles.GetRolesForUser()
  {string[9]}
  [0]: "None"
  [1]: "CONSOLE LOGON"
  [2]: "Everyone"
  [3]: "NT AUTHORITY\\This Organization"
  [4]: "NT AUTHORITY\\INTERACTIVE"
  [5]: "NT AUTHORITY\\Authenticated Users"
  [6]: "NT AUTHORITY\\NTLM Authentication"
  [7]: "LOCAL"
  [8]: "BUILTIN\\Users"
  </code></pre>
  
  <p>However, when I look at my group membership in the Manage Computer screen, I'm in the following groups:</p>
  
  <pre><code>Administrators
  Users
  GROUP_NAME
  </code></pre>
  
  <p>So: @User.IsInRole("None") returns true; @User.IsInRole("GROUP_NAME") returns false.</p>
  
  <p>Where is the GetRolesForUser picking up the group list from?</p>