title: Copied website to new IIS and I lost security
body: <p>First time copying my test database from "work" database to "live".  I used Visual Studio to design my website, my database is a SQL 2008 database, and I publish to IIS.</p>
  
  <p>Security worked fine on my test website - the website asked for user id and password the first time I log on - using Windows authentication (Integrated Security =SSPI).  I copied my website to same server with Visual Studio, my SQL database to a new SQL Server, and published it to IIS on a new web server, keeping all the same settings. Now, with the new settings, any user can open the website - it does not ask for user id and password.  The website works correctly - the security just isn't working. Here's exactly how I copied:</p>
  
  <p>I copied my Visual Studio project "timework - work copy" to "timework" on janetdev server.<br>
  I copied my SQL database "TimeSQL" on janetdev to "TimeSQL" on to the new SQL server.  I double checked all the user security to make sure that everything was the same on the new server.
  I published the new VS project "timework" - keeping it Integrated Security =SSPI.
  I went to the new IIS server and imported the new project into IIS.  I double checked all the settings in IIS (on old janetdev) to make sure that they were the same on the new server. </p>
  
  <p>What could I be missing?  Why can anyone get into the new website??  The only thing I could think of is that everything (VS project, SQL database, and IIS) was on one server before.  Now, they are all on different servers.  One other thing - SQL was 2008 R2 on the test server, and it's 2008 on the new server.  Not sure if that could cause a problem.  I'm confused.  </p>
  
  <p>Thanks for any help!</p>