Configuration Authorization

I am trying to restrict access to a directory to only allow registered users in the role admin.

 <configuration>
<appSettings/>
<connectionStrings/>
<system.web>
<authorization>
<allow roles="Admin"/>
<deny users="*"/>
</authorization>
</system.web>
</configuration> This configuration is restricting access to every user, authenticated or not, in the role or not.
 
...