iis hosted wcf-service + windows auth iis + transportcredentialonly/windows auth basichttpbinding

i wish emanate wcf-service hosted iis6 invalidate opposite authentication iis. don't ssl.

so wholly proceed i have basichttpbinging transportcredentialonly, itsn't it?

i emanate practical directory, set windows integrated auth uncheck "enable opposite access".

here's web.config:

<system.servicemodel>
        <bindings>
            <basichttpbinding>
                <binding name="mybinding">
                    <security mode="transportcredentialonly">
                        <transport clientcredentialtype="windows" />
                    </security>
                </binding>
            </basichttpbinding>
        </bindings>
        <services>
            <service name="samples.servicefacadeservice" behaviorconfiguration="servicefacadeservicebehavior">
                <endpoint address="" binding="basichttpbinding" bindingname="mybinding"
                          contract="samples.iservicefacadeservice">
                </endpoint>
            </service>
        </services>
    <behaviors>
        <servicebehaviors>
            <behavior name="servicefacadeservicebehavior">
                <servicedebug includeexceptiondetailinfaults="true"/>
            </behavior>
        </servicebehaviors>
    </behaviors>
</system.servicemodel>

you i even haven't enclosed mex-enpoint metadata exchange. only endpoint contracting transportcredentialonly security.

but i tries start use (invoking slight throught fan proxy) i got such difference eventlog:

exception:
system.servicemodel.serviceactivationexception:
service
'/wcftest/servicefacadeservice.svc'
can't activated due an
difference during compilation. the
difference summary is: security
settings use require
'anonymous' authentication nonetheless is
enabled iis application
hosts service.. --->
system.notsupportedexception: security
settings use require
'anonymous' authentication nonetheless is
enabled iis application
hosts service.

i have thought since use need opposite auth? why?