I was missing just that one slash, thanks.
I was able to get it to say "Access Denied" now, but I can't figure out how to make the roles work. I added the a group that I below to, and I'm still getting access denied.
<allow roles="ALC\ALC-IT" />
ALC is our NetBIOS domain name, and ALC-IT is a security group every IT employee belongs to. I'm getting Access is denied.
Any help is appreciated.