I have created Active Directory Group to allow access to certain users to an IIS 8.5 site. I have installed "URL Authorization" module as shown in below link:
http://www.iis.net/configreference/system.webserver/security/authorization
Added following Rule in Web.config file to allow access to users under "Domain\Security Group1" to IIS site.
<system.webServer>
<security>
<authorization>
<remove users="*" roles="" verbs="" />
<add accessType="Allow" users="" roles="Domain\Security Group1" />
</authorization>
</security>
</system.webServer>
But, above solution denies access to all users including users under "Domain\Security Group1".
I found following link in this forum, but it seems to for older IIS version (IIS7 and below)
Restrict access to IIS site to an AD Group