Summary of IIS windows Integrated Identity Authentication

Prerequisites:
Disable Anonymous Access and enable Windows integrated authentication.

If the client browser accesses IIS through an IP address, the access will be treated as a non-local Intranet access, only NTLM authentication will be used, and the user name and password of the current logon user will not be automatically uploaded to the server, in the dialog box that appears, enter the user name and password manually. Unless you set these IP addresses to Local intranet addresses in the Local intranet settings of IE
If the client accesses IIS through the machine name, if the client is logged on with a domain user and the server is also in the domainKerberosVerify that the user's authentication ticket is used to determine whether the user has the right to access IIS resources. If the client is not logged on with a domain user or the server is not in the domain, then, ie will first automatically upload the user name and password of the current user to the server for verification. If the user name and password are successful, IIS will allow access to resources; otherwise, access will be denied and a dialog box will pop up in IE, the user is required to enter a user name and password. After the user is entered, ie will use the user name and password entered by the user to re-upload it to the server for verification.

Summary Source: Detailed tests of IIS Authentication