title: How to implement security for ASP.NET MVC site to deny access to a particular group?
body: <p>I have an internal corporate ASP.NET MVC website. </p>
  
  <p><strong>Requirement(1):</strong> When any person is on the network, they can access this site EXCEPT one AD Group (Example: AD_Sales group).</p>
  
  <p><strong>Requirement(2):</strong> Also like for example if a person that has the access passes a url (Ex: <a href="http://mysite/Home/Index/Product/Letter" rel="nofollow">http://mysite/Home/Index/Product/Letter</a>) to a sales group person, he still should NOT access and need to display a custom message saying "You are not authorised to view this page".</p>
  
  <p>If the scenario is like to issue the access to one AD Group and deny access for all others, it is fairly is. It can done from IIS. I am Wondering how to do this. </p>
  
  <p>Anybody has implemeted the security for this scenario? </p>
  
  <p>I appreciate your time and responses.</p>
  
  <p>Thanks</p>