Suitable Windows-based logon configuration

[Evgeny Zoldin]

Hi, ALL

On WindowsXP Prof with IIS 5 and installed ASP.NET (.NET Framework 1.1....)
will be configured ASP.NET application with Windows-based authentication.
Only specified users that have account on this local computer will be
authorized (such requirements :-(( ). These users should have rights to
access resouces in those "My documents" respective folder and run some
defined program in "Program Files\...". Additionally, for the logged on user
its surname and last name must be red from its profile settings on thi
machine.

So, what the best way to satisfy that requirements?

1. Create local group an this computer, add there the users, assign rights
to the group (which right? where?), activate in Web.config option
<authorization mode="Windows" />, set <allow roles="The_Group" /> (or
"COMP_NAME\The_Group" ?). Whether anonymous access must be unchecked under
ISS properties of the ASP.NET application and Windows Integrated switched
on?

Another way?
How to obtain users properties from its local profiles?

Thanx
Evgeny