Have you tried clearing the browser cookies? Have you tried different web browsers or machines to see if the problem happens everywhere?
Does the site have SSL?
In IIS it should be configured for anonymous authentication. I would check if authentication type is exposed somewhere in your web control panel where you can configure it.