title: integrating active directory group with windows authentication aspnet mvc 3
body: <p>I'm using windows authentication in a mvc 3 app, and I want to only some groups of my active directory to access this app. I'm not using [Authorize] attribute in my controllers, just my web.config configuration.</p>
  
  <p>This is how I setup my web.config:</p>
  
  <pre><code>  &lt;system.web&gt;
      &lt;authentication mode="Windows" /&gt;
      &lt;authorization&gt;
      &lt;allow roles="EUsers" /&gt;
          &lt;deny users="*" /&gt;
      &lt;/authorization&gt;
    &lt;/system.web&gt;
    &lt;system.webServer&gt;
      &lt;validation validateIntegratedModeConfiguration="false" /&gt;
      &lt;modules runAllManagedModulesForAllRequests="true" /&gt;
      &lt;security&gt;
          &lt;authorization&gt;
              &lt;add accessType="Allow" roles="EUsers" /&gt;
              &lt;add accessType="Deny" users="*" /&gt;
          &lt;/authorization&gt;
      &lt;/security&gt;
    &lt;/system.webServer&gt;
  </code></pre>
  
  <p>I also enabled Windows Authentication and ASP.NET Impersation on my IIS Authorize section.
  I'm trying to access the app with my user (and I'm a member of EUsers), but it's always prompting for my user and password. Did I forget something? Am I doing something wrong?</p>