Here is the short of it:
IIS for an individual sites should only have one type of
authentication. That was one issue.
For some reason anonymous access kept being turn on. We did
experiment with anonymous access, but the integrated windows
authentication works for our environment. So #1 turn on the type of
authentication that you need (only 1 type)for the site you are having
issues.
Stop the iis for the individual website,
then goto application pools in IIs select mssharpointportalapppool
stop the service (wait a minute) then restart, then restart your iis
for the website.
We believe that the application of an update triggered this. We are
still testing and repatching.