Hi, I have an asp.net website. In the website are all my aspx/html pages and a folder called "software". I have created a role called 'admin'. I only want 'admin' users to be able to access files inside the 'software' folder.Using Visual Web Developer, I created an access rule which allows access to 'admin' users and denies access to all others. This worked fine on my local pc. The problem is that after copying all the web files up to the website, the software folder is accessible to all users. So, anyone can come along and download files from that folder if they know the address.Here is the web.config file that is located in the 'software' folder. Am I missing something?<?xml version="1.0" encoding="utf-8"?>