I have a Windows 2008 R2 SP1 domain with several IIS7 servers. I am able to switch any particular website between basic authentication and Windows integrated authentication. However what I need is to have some domain users/groups use basic authentication and other users/groups use integrated authentication.