For IIS Express
You can customize it here. You can also disable anonymous access.

For IIS
I found it necessary to install this under system.webServer
<system.webServer> […] <security> <authentication> <anonymousAuthentication enabled="false"/> <windowsAuthentication enabled="true"/> </authentication> </security> </system.webServer>
This is almost the same as the @Dimitar suggestion - use IIS Manager to change the setting. The difference is that the configuration file avoids the manual step - but adds the following:
Note:
By default, the IIS function delegation function blocks some of these settings (Basic and Windows auth), so you need to go to the root directory of the IIS server and enable them for reading / writing. For instance:.

A more detailed description of access to delegation of functions is here .
source share