>Is it possible that there is a permissions problem on the NTFS side? In other words, make sure that your physical directories give Everyone at least Read access. Remember that even though IIS uses the NT Domain logon information with NTCR, you still need to grant access to those domain accounts to the specific directories. Also, once you access a resource on the server that authenticates you with your domain ID, all other resources will be accessed using that ID; so, if you have other directories that are setup to **only** use anonymous access, you would not be able to access them once you have been authenticated with your domain ID. For those other directories that allow anonymous access, make sure you also have the NTCR option checked; anonymous will be checked first, but if it fails, NTCR will be used next.
>
>Hope this helps.

Thanks for the response. I found that 2 subdirectories that are accessed for images, etc. did not have the NTFS permissions set properly so I changed that ( to Read & Execute ). But other than that everything looks correct. The web site folder and all the virtual directories have NTCR set and the NTFS permissions for them are set to Read & Execute for the Everyone account. Nevertheless, as soon as I hit the main web page, IIS challenges me. It does not "seem" to be identifying me. At least, that's what it looks like. It may be something else and I am misinterpreting it. At any rate IIS challenges me as soon as the web page is hit. I'm missing something here but I have no idea what. And unfortunately, I am not an IIS/NT Security expert ... and if I didn't have to mess with it, I'm not sure I'd want to be. :-)

Bill