In an IIS 10 C#.NET setup, when a user is logged into a web application whose access control is done via web.config as seen below (logins controlled by AD), is it possible t