Hi,
I have an application that is configured for forms authentication at the root level web.config file. Only one folder in the site requires users to authenticate via a Forms authentication login page.
I want to make another folder ("admin") only available to Windows authenticated users. I know that there is a convoluted process for mixing windows and forms authentication in the one site, but can I simply turn off anonymous access in IIS for just this admin folder? I dont need to filter which windows authenticated users can/cant access the admin folder - all they need to do is authenticate on the local domain. My code also does not ever need to determine who the current user is.
Assuming I also set the filesystem security on the admin fodler correctly will this work?
Regs
Mark
...
Go to the complete details ...