asp.net mvc - Windows Authentication works for me but not anyone else -

i trying convert authentication application forms authentication windows authentication. having made conversion , deployed test server, find have access, 2 colleagues in same security group not. site, prompted login+password. security groups set in ad , used roles. confused this, not sure next try , fix this. more details. web.config set follows:

<authentication mode="windows" /> <authorization>   <deny users="?" /> </authorization> 

the controller containing first page set

[authorize(roles = @"domain\role1, domain\role2, domain\role3")] public class contractcontroller : basecontroller 

(the role names have changed). myself , 2 colleagues set role 3. iis on test server project set to:

so else need work?

you need disable anonymous authentication in scenario. see https://msdn.microsoft.com/en-us/library/gg703322%28vs.98%29.aspx.

check there no spelling mistakes in role names (you have role 3 , role3 in example, though realise doesn't correspond actual code).