Access rules are not working

Hi,
I am using web.config file in a folder to protect its contents. On my machine, the access rules work fine, however, once I publish them to the server. They no longer work, anyone can access its contents even un-authenticated users.
Here is the contents of the web.config file:

<?xml version="1.0" encoding="utf-8"?>
<configuration>
    <system.web>
        <authorization>
          <deny users="?" />
          <allow roles="admin" />
          <deny users="*"/>
        </authorization>
    </system.web>
</configuration>
Here is my web.config configurations:
< ...