Windows User Security Context Requirements

Your IIS Web server environment must meet the following requirements to use the Windows security context feature:

All IIS servers have to be trusted in the domain in which the user is authenticating. You can establish trust relationships among servers that provide distributed services for groups of users. To set up trust relationships, see Microsoft server documentation.
Users must have the privileges to log on locally to the Web server. If there are multiple servers, users need the right to log on locally to all servers.
To enable a user to log on locally, configure this feature through the IIS Administrative Tools. See Microsoft documentation for instructions.
If you are using a specific domain account and not the system account when starting the World Wide Web Publishing Service, you must set the user's account privileges to act as part of the operating system for the domain account running the service. This feature is configured through the Administrative Tools. See Microsoft documentation for detailed instructions.