ASP.net & IIS & Basic Authentication

If you want to specific your asp.net web app to be access from some one, then you could,

My assumption, there is an AD for user/password checking,

• No need setup NTFS security
• Turn on Basic Authentication in your application setting in IIS manager
• Modify the web.config to use Windows as the authentication mode

  <system.web>
  <authentication mode="Windows" />
  </system.web>
  

• Add allowed user or group in .NET authorization rule in your application setting in IIS manager