身份验证模式和ASP.NET MVC中的WindowsAuthentication标记之间的区别

Question

In IIS 7, if application is configured using below section it is giving 401 error.

<authentication mode="Windows" />
<authorization>
   <deny users="?" />
</authorization>

And when below section is added, it is working fine. So, do we need to have both sections in web.config.

<system.webServer>
 <security>
            <authentication>
                <anonymousAuthentication enabled="false" />
                <windowsAuthentication enabled="true" />
            </authentication>
  </security>       
</system.webServer>

Answer 1

Yes. you need to turn off anonymous authentication.