I have added the restriction rules to the web.config like stated here
http://www.lansweeper.com/kb/restrict.aspx
<system.web>
<authentication mode="Windows"/>
<identity impersonate="true" />
<authorization>
<allow roles="sub.domain.com\Ou van grp\grp\grp\grp\grp\the actual user grp" />
<deny users="*" />
</authorization>
<compilation debug="false" strict="false" explicit="true">
Also disabled anonymous access and enabled Integrated windows auth.
It all seems to work till i try to log in i do get the IE user name and password screen but when I enter my user name and password is tells me it's incorrect