I have an application with a folder in its root called 'Admin'. The application is used Windows Integrated Authentication, but I want to secure the admin directory with forms based access controls ( Dont ask why its a long story :). I know ive done this beforesuccessfully, but it simply bypasses any access control and goes straight to the page in the admin folder without going to the login.aspx. What am i doing wrong ? heres the config file I put in the Admin directory. <?xml version="1.0"?>
<configuration>
<location path="Admin">
<system.web>
<authentication mode="Forms">
<f ...
Go to the complete details ...