I have Windows Server 2008 R2 x64b installed with IIS 7, PHP 5.5.

This server is added to domain exampledomain , so I have win authentication enabled and all others disabled. I left the two default providers NTLM and negotiate, I granted IIS_IUSRS read access to wwwroot.

So far it has worked for me only as I am added to the Administrators group which has read/write access to wwwroot folder.

Yet, when someone else is trying to connect, he gets a credentials window and when he puts the domain name and password he cannot get access to the page.

The issue is solved when I add read permission to "Domain users" - then all works fine.

BUT. My issue is that if one opens windows explorer and types \\servername\wwwroot one can see the files and read them. I have never configured IIS before so I know I miss some really important thing. How can I solve the file visibility problem?