Working on DNN 5.1.1 at present. I have AD set up on DNN 4.9.4 and it works as I want but on this portal it doesn't quite.

I want folks - whoever they are, whether in IP range or having a network AD account or not, to be able to come to the home page of the site without logging in automatically. After arriving at the home page, then I want to give them the option of loggin on via windows authentication or standard DNN. But the home page and a couple of others should be available to unauthenticated users as well as authenticated.

But what is happening is an access denied message if not providing credentials.

I have to log on with my windows account, then log on, and then log on with a standard DNN account (the home page does remain visible after log out).

What combination of settings in IIS virtual directory, web.config and on DNN site do I have to have to enable this?

Not ... flakey and unpredictable behavior.

Sometimes I get an error message from the windows login module saying that it's not ok to have anonymous authentication enabled. But I can try again a time or two and get to the home page as desired.

However, now it is not possible to log on with Windows authentication at all. Looked good yesterday but it's not good today.

This message:

Error while processing Windows Authentication
Check your IIS settings. DesktopModules/AuthenticationServices/ActiveDirectory/WindowsSignin.aspx should NOT allow anonymous access.

Appears when initially coming to the site much of the time, but not always. Navigating to the same URL a second time goes to the correct home page.

I don't want Windows authentication to try to handle this upon first approach. How can i fix this?