title: Unauthenticated users can't see images in website
body: <p>When I run my website through debug mode in visual studio everything looks great and all the images on the page show up fine.  But once I deploy my website to an IIS7 web server (doubt that other versions would make any difference, but you never know) then users can't see the images on the site until they log in.</p>
  
  <p>The website is an asp.net MVC site and I'm new to MVC, though I do have lots of experience with asp.net forms.  It seems that only authenticated users are allowed to access the images folder, and there is an authorization section in my web.config saying that only admins can access the site, so how do I make it so that all users, authenticated or otherwise can view the images?</p>
  
  <p><strong>-- Update --</strong></p>
  
  <p>I tried putting in the configuration block suggested, which from everything I can tell makes perfect sense, but it didn't seem to make a difference.  The sample below has Content/Images for the path but before that I tried just Content, since it's OK for everything in there to be accessible.  I also tried setting the allowOverride setting to false, which also didn't seem to make a difference.</p>
  
  <pre><code>&lt;location path="Content/Images"&gt;
      &lt;system.web&gt;
          &lt;authorization&gt;
              &lt;allow users ="*" /&gt;
          &lt;/authorization&gt;
      &lt;/system.web&gt;
  &lt;/location&gt;  
  </code></pre>
  
  <p><strong>--Update 2--</strong>
  Funny thing is that I don't even see any explicit deny entries in my web.config, just an allow for admin's, and when I went into IIS 7 and used the UI to allow all users access to the Content directory it didn't show any deny's on the list either.  But then again, this project works fine when I just debug it from my personal computer, it's only after I deploy it that I have problems...</p>
  
  <pre><code>&lt;authorization&gt;
      &lt;allow roles="admin" /&gt;
  &lt;/authorization&gt;
  &lt;authentication mode="Forms"&gt;
      &lt;forms loginUrl="~/Account/LogOn" timeout="2880" /&gt;
  &lt;/authentication&gt;
  </code></pre>