Based on posts with similar problems, I confirmed my URL does not include any periods, double checked that my IE settings are set to Enable Integrated Windows Authentication, and also added my URL to my intranet sites, but still getting the pop-up. I have been troubleshooting this issue for a few days now and cannot figure out the problem. However, what I'm getting is a Windows login pop-up when I try to access the site. With this setup, I'm expecting behind the scene verification of the Windows user to allow access and deny anonymous users. I have set Windows Authentication to enabled in IIS with all other security types disabled and my application web.config file authentication/authorization is set up as: NET 3.5 application running under IIS 7 on Windows 2003 server and cannot get integrated windows authentication working properly as I continue to get prompted for a login.