Deny all users except for Admin

My website has two directories that require people to login - "/admin" and "/users"
I currently have my web.config set up as:


<location path="admin">
      <system.web>
        <authorization>
          <deny users="?" />
        </authorization>
      </system.web>
    </location>

    <location path="users">
      <system.web>
        <authorization>
          <deny users="?" />
        </authorization>
      ...