title: IIS site keeps prompting for credentials for Windows Authentication method
body: <p>I need some help to understand what is the exactly reason I can'g get Windows Authentication working on IIS site for a specific user's group. 
  What is happening is that even my user being part of the group which I gave access to the site, IE keeps prompting for my credentials and even when I type the password the HTTP response is 401 (Unauthorized).
  I'm also not allowed to change IE's settings to add any site to the trusted list (it's blocked by the company). In the other hand, besides the fact that it's blocked, the site domain is listed like 
  (*.domain.com) </p>
  
  <p>Follow bellow the scenario:</p>
  
  <ul>
  <li>Server: Windows Server 2012 </li>
  <li>IIS: 8.5 </li>
  <li>Users: DomainA\MySimpleAdUser, DomainB\ServiceAdUser </li>
  <li>Groups: DomainB\MYGROUP (AD Group which contains DomainA\MySimpleAdUser)</li>
  <li>IIS_IUSRS (Local Server group which contains DomainB\ServiceAdUser)</li>
  </ul>
  
  <p><strong>Pool Settings</strong></p>
  
  <blockquote>
    <ul>
    <li>Name: PoolA</li>
    <li>Process Model > Identity > DomainB\ServiceAdUser</li>
    </ul>
  </blockquote>
  
  <p><strong>Settings on Server Level</strong></p>
  
  <blockquote>
    <ul>
    <li><p>ASP.NET > .NET Authorization</p>
    
    <ul>
    <li>Allow | Users: All Users | Entity type local</li>
    </ul></li>
    <li><p>IIS > Authentication</p>
    
    <ul>
    <li>Anonymous Authentication disabled</li>
    <li>Windows Authentication Enabled
    
    <ul>
    <li>Extended protection: Off</li>
    <li>Enable Kernel-mode authentication: Enabled</li>
    <li>Providers: Negotiate(1st) -> NTLM(2nd)</li>
    </ul></li>
    </ul></li>
    <li>IIS > Authorization Rules
    
    <ul>
    <li>Allow | Roles: DomainB\MYGROUP | Entity type local</li>
    </ul></li>
    </ul>
  </blockquote>
  
  <p><strong>Settings on Site Level (which runs on a valid SSL certificate on 443 port, this is the only binding)</strong></p>
  
  <blockquote>
    <ul>
    <li><p>Pool: PoolA</p></li>
    <li><p>ASP.NET > .NET Authorization</p>
    
    <ul>
    <li>Allow | Users: All Users | Entity type inherited</li>
    </ul></li>
    <li><p>IIS > Authentication</p>
    
    <ul>
    <li>Anonymous Authentication disabled</li>
    <li>Windows Authentication Enabled
    
    <ul>
    <li>Extended protection: Off</li>
    <li>Enable Kernel-mode authentication: Enabled</li>
    <li>Providers: Negotiate(1st) -> NTLM(2nd)</li>
    </ul></li>
    </ul></li>
    <li><p>IIS > Authorization Rules</p>
    
    <ul>
    <li>Allow | Roles: DomainB\MYGROUP | Entity type inherited</li>
    </ul></li>
    </ul>
  </blockquote>
  
  <p><strong>Permissions on site root directory</strong></p>
  
  <blockquote>
    <ul>
    <li>Full control permission to IIS_IUSRS</li>
    <li>Read&amp;Execute, List and Read permissions to MYGROUP</li>
    </ul>
  </blockquote>
  
  <p><strong>Web.config</strong></p>
  
  <blockquote>
    <ul>
    <li>This is the only configuration line that exists regarding authentication: 
    &lt;authentication mode="Windows" /&gt;</li>
    </ul>
  </blockquote>
  
  <p>=============================</p>
  
  <h1>Observations</h1>
  
  <ul>
  <li>I already tried to use my specific user to get access to the site, but stills prompt for the credentials</li>
  <li><p>The only way to get the site up and running is when I allow anonymous access to it.</p>
  
  <p>Please help me to figure out what is missing. I appreciate any help.</p></li>
  </ul>