I have a web service up and running using IIS 6.0.
Since we are in an Active Directory (AD) envionment I want to allow access
to a specific security group in AD.

In my web.config I have
<authentication mode="Windows" />
<identity impersonate="true"/>

As it stands the when I configure as follows it works for the specified
user, however I can't get it to recognize an AD security group. Is there a
specific syntax that is required?

<authorization>
<allow users="mydomain\atestuser" />
<deny users="*" />
<deny users="?" />
</authorization>

thanks in advance