Windows Authentication

Windows authentication is a means of authenticating users of web applications that run on an intranet with their ntlogin.
The role placed by IIS in windows authentication differs from Forms authentication,.
In Forms authentication we need to set anonymous authentication where as in windows authentication IIS is configured to block windows authentication.After set the security levels in IIS
-Web.config file need to be set up with Authentication mode set to “Windows”

  <authentication mode="Windows" />

Set the <identity> element to

impersonate:

  <identity impersonate="true" userName="" password="" />

If you want all requests to use a different account than IIS used for authentication, the userName and password attributes of the <identity> element can be set to the desired username and password.

Configure the <authorization> element to

deny access to all users:

  <authorization>

      <deny users="*" /> <!-- Deny all users -->



</authorization>

Add location element if you need to restrict access only to certain pages