Lock down a user to IIS only

Hey folks,

Newbee here, although I have found the site invaluable but this is my first post. We have an IIS web application that we want to demo but we may also have select potential customers test/play with it on thier own.

I have set the props on the web site in IIS to Windows Authentication. For our demo team using their individual login creds this works great, just like OWA. For the customer use, I set up a demo account. I have tried to limit all access through the props on the account. What how is the best way to allow that demo account to access the web site via windows authentication but restrict access to the rest of our network.

Thanks,

Chip