Restrict access to 'Reports' and 'ReportServer' Directories...

Hi,

I am implementing Reporting Services in an ASP.NET application with Forms Authentication.

Content on the sites is restricted through the Forms Authentication, but if you type http://<servername>/ReportServer or http://<servername>/Reports you get full access to the Report Manager interface.

We could change the Virtual Directories to only allow authenticated users, but the problem is Reporting Services is requiring the IUSR_machinename account to run.

How can i restrict access to these Virtual Directories?

Thanks in advance,
Christian
...