title: Where is Anonymous Authentication setting stored in IIS? No web.config created
body: <p>I added an ASP.NET application under a virtual directory in Default Web Site. When I change the Authentication settings for a subfolder in the application (such as by disabling Anonymous Authentication) I can't find where the setting is being stored. There is no web.config being created in the subfolder, the application's root web.config is untouched and Process Monitor doesn't record any file writes either.</p>