I have an IIS site in IIS 8.5 of Windows Server 2012 R2 STD. It's AD environment in my local. I've enabled Windows Authentication in my IIS site and it works well for all AD users.
But now I come into an issue that AD users can only log on to IIS site on the computers on which they have the "log on to" permission.
So, I think the Windows Authentication in IIS works the same way AD users log onto AD computers on the console. It authenticates both username/password and if this AD user has "log on to" permission on the computer.
How can I change IIS to authenticate only username/password?