One of our apps has two kinds of authentication enabled in IIS: anonymous and forms.
Is it possible to secure a folder and all of its subfolders within this app? In other words, can I stop people from accessing this folder and all its subfolders over the web?
<configuration>
<location path="subdir1">
<system.web>
<authorization>
<deny users ="*" />
</authorization>
</system.web>
</location>
</configuration>
This is how we are told to do it, but does this work with anonymous authentication?
Go to the complete details ...