Security is not working

[Jrobinson]

I've been trying to restrict access to Lansweeper, but attempts to limit access either result in no access or all access. Below are the error, code pulled from the web.config and dfresult. Let me know what you think.

Access is denied.
Description: An error occurred while accessing the resources required to serve this request. The server may not be configured for access to the requested URL.

Error message 401.2.: Unauthorized: Logon failed due to server configuration. Verify that you have permission to view this directory or page based on the credentials you supplied and the authentication methods enabled on the Web server. Contact the Web server's administrator for additional assistance.

__________________________________________

<authentication mode="Windows"/>
<identity impersonate="true" />
<authorization>
<allow roles="hartfordschools.org\GG_MHIS_Staff"/>
<deny users="*" />
</authorization>

____________________________________________

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

H:\>gpresult

Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 5/6/2009 at 8:11:07 AM


RSOP results for HARTFORDSCHOOLS\jrobinson001 on HP-XP-80QKT : Logging Mode
----------------------------------------------------------------------------

OS Type: Microsoft Windows XP Professional
OS Configuration: Member Workstation
OS Version: 5.1.2600
Domain Name: HARTFORDSCHOOLS
Domain Type: Windows 2000
Site Name: Oxford-Server
Roaming Profile:
Local Profile: C:\Documents and Settings\jrobinson001
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
CN=HP-XP-80QKT,OU=MHIS,OU=Workstations,DC=hartfordschools,DC=org
Last time Group Policy was applied: 5/6/2009 at 7:22:56 AM
Group Policy was applied from: co-2k3-dc1.hartfordschools.org
Group Policy slow link threshold: 500 kbps

Applied Group Policy Objects
-----------------------------
SUS Deploy - HartfordSchools
DesktopService_to_LocalAdmin
RenameAdmin
Allow Remote Connections
Munis Permissions
AdvAgentInstall
Default Domain Policy
Remote Assistance Activation
Allow Remote Connections

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Outlook 2007 Settings
Filtering: Not Applied (Empty)

Outlook 2000 Settings
Filtering: Not Applied (Empty)

Outlook 2003 Settings
Filtering: Not Applied (Empty)

Outlook XP Settings
Filtering: Not Applied (Empty)

Local Group Policy
Filtering: Not Applied (Empty)

Hartford Online Resources
Filtering: Not Applied (Empty)

The computer is a part of the following security groups:
--------------------------------------------------------
BUILTIN\Administrators
Everyone
BUILTIN\Power Users
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
CP-XP-94273596$
Domain Computers


USER SETTINGS
--------------
CN=J. Robinson,OU=MHIS,OU=Departments,DC=hartfordschools,DC=org
Last time Group Policy was applied: 5/6/2009 at 7:24:00 AM
Group Policy was applied from: co-2k3-dc1.hartfordschools.org
Group Policy slow link threshold: 500 kbps

Applied Group Policy Objects
-----------------------------
AdvAgentInstall
Default Domain Policy
Hartford Online Resources
Outlook 2000 Settings
Outlook XP Settings
Outlook 2003 Settings
Outlook 2007 Settings

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Remote Assistance Activation
Filtering: Not Applied (Empty)

Allow Remote Connections
Filtering: Not Applied (Empty)

Local Group Policy
Filtering: Not Applied (Empty)

The user is a part of the following security groups:
----------------------------------------------------
Domain Users
Everyone
Debugger Users
Offer Remote Assistance Helpers
BUILTIN\Users
BUILTIN\Power Users
BUILTIN\Administrators
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
GG_260CPConfRoomAdmins
GG_DesktopService
GG_MHISTrainingRoomAdmins
'Password_Admin'
GG_MHIS_Staff
GG_EpoAdmins
GG_COPCLocalAdmins
GG_SmartStreamUsers
GG_COSSLVPN
GG_MHISExec
GG_MHIS_Access_to_All_Depts
GG_MetroShare
Domain Admins
GG_MHIS_SrStaff
GG_MHISConfRoomAdmins
GG_MHISEndUserSupport
GG_Adabas
GG_COPCAdd
GG_Helpdesk
GG_HDRemote
GG_MunisUsers
GL_MunisUsers
GU_DesktopService
GU_AddPC
GUD_MHISNetworkOperations
GU_SSLVPN
GL_SmartStreamUsers
GL_DesktopService
GL_PwdReset
GL_HDRemote
Offer Remote Assistance Helpers
GL_MHIS_Team
GL_PCAdd
GL_PCLocalAdmins
GL_MHISExec
GL_MHIS_Staff
MSDSS Admins
GL_COSSLVPN
GL_HelpDesk

H:\>

[Hemoco]

Make sure that Intergrated authentication is enabled in IIS.

[Jrobinson]

I tried with hartfordschools.org and hartfordschools, neither allow access. Do you see anything else wrong?

[Hemoco]

You will need the netbios name

<allow roles="hartfordschools\GG_MHIS_Staff"/>