Windows Authentication with Asp.net and against Active Directory

[Patrick]

How can i use Windows authentication in IIS against AD.
How will i create a WindowsPrincipal object(with asp.net) in the
Context.User property that is used for providing identity and authorization
services to my application.
How will i use the IsInRole method in WindowsPrincipal to return true or
false based on the user's AD group membership.
If u have any code articles and resources please pass it over

 

[Paul Glavich [MVP - ASP.NET]]

In IIS, disable anonymous auth, enabled Windows Integrated Auth
In Web.config have something like :-
<identity impersonate="true" />
<authorization>
<allow roles="DOMAIN\DomainGroup" />
<deny users="*" />
</authorization>