When running an ASP.NET project that uses Windows Authentication in VS using IIS express on a computer joined to domain C.B.A, authentication works and local groups of C.B.A that the user is part of are found on the WindowsPrincipal claims.