Access Rules of folder not apply after i published the website

hi i developed a small application with some security , i denied the access of anonymous user in my folder of website name DOCFOLDER with website administration Tools , i test this application in developing mode then it runs fine, after i published this website in a localhost IIS, then deny role of anonymous user is not active , i mean to say every user access the inner stuff of DOCFOLDER.
please help.
...