Hi,
I have restricted web pages for admin to manage users in my web app. In my web.config file, I have this:
<location path="NoAccess.aspx">
<system.web>
<authorization>
<allow users="?" />
<authorization>
</system.web>
</location>
<location path="ManageUsers.aspx">
<system.web>
<authorization>
<allow roles="Administrator">
<deny users="*"/>
</authorization>
</system.web>
</location>
<location path="Default.aspx">
<system.web>
<authorization>
<a ...
Go to the complete details ...