web.config secure directory with gal group

Question

So, I have the following in the web.config

 <authentication mode="Windows"/>
 <authorization>         
  <allow users="domain\johndoe" />

  <!--Deny All Others-->
  <deny users="*" /> 
 </authorization>

But, what I want to do, is only allow users in a specific GAL group on our AD server and that doesn't seem to work with these settings.

Is there an authentication mode that will? Everything I find referencing AD wants to use forms! Which I do not want.

Answer 1

Try this

<authorization>
    <allow users="*" roles="domain/group" />
    <deny users="*" />
</authorization>

Answer 2

I don't think you can do it a simply as settings within the Authorization tag. Check out the Acitve Directory membership provider - perhaps that is what you want...

How To: Use Forms Authentication with Active Directory in Multiple Domains in ASP.NET 2.0