Forms Authentication web.config set up
<p>Is this specification correct in the root web.config file? I haven't used a child web.config in the protected folder.</p>

<pre><code>&lt;system.web&gt;
  &lt;authentication mode="Forms"&gt;
    &lt;forms name=".ASPXAUTH" loginUrl=""&gt;
    &lt;/forms&gt;
  &lt;/authentication&gt;
&lt;/system.web&gt;
</code></pre>

<p>Then another specification for system.web also in root web.config:</p>

<pre><code>&lt;location path="to protected folder"&gt;
  &lt;system.web&gt;
    &lt;authorization&gt;
      &lt;deny users="?"/&gt;
    &lt;/authorization&gt;
  &lt;/system.web&gt;
</code></pre>

<p></p>
