IISWindowsAuth = 'Enabled'

Hello

I currently have IISWindowsAuth Enabled on one site. now I need to have AD users or maybe one AD groups test the site using their ad credit.

do I look at web.config authorization rules under IIS 8?

also do I need to look at ntfs permissions? not sure what site does at the point.

thank you

=====

update... I check the settings all users are allow under authorization rules, but the NTFS permissions right now only has 2 users building the site and the application pool name (not IUSR)