title: Does authorization in web.config check sub-groups as well?
body: <p>If I put something like this in my ASP.NET web application's web.config:</p>
  
  <pre><code>   &lt;authorization&gt;
         &lt;allow roles="MyUsers" /&gt;
         &lt;deny users="*" /&gt;
     &lt;/authorization&gt;
  </code></pre>
  
  <p>and then have an ActiveDirectory group <code>SpecialGroup</code> that is inside <code>MyUsers</code>, will a member of SpecialGroup be allowed to access my application?</p>