I have a web config file inside of an Administrative directory that I want 
to restrict access to.  However, what I want to do is restrict access to 
all users and specify which users I want to have access.  Reason for this 
is because it is a much shorter list to specify who is granted access than 
who is not.

My web config file looks like this:
<?xml version="1.0" encoding="utf-8" ?>
<configuration>
    
  <system.web>

    <authorization>
    <deny users="?" />
    <allow users="99451" />
    </authorization>
   
  </system.web>

</configuration>

However, this config is still allowing everyone in.  Can someone help me 
out on this?

Thanks,

Tim

add the authentication mode in your <system.web>..</system.web>
for example :
<authentication mode="Forms">
         <forms name=".USERAUTH" loginUrl="loginpage.aspx" protection="All" />
</authentication>

At 03:48 PM 10/18/2002 +0000, you wrote:
>I have a web config file inside of an Administrative directory that I want
>to restrict access to.  However, what I want to do is restrict access to
>all users and specify which users I want to have access.  Reason for this
>is because it is a much shorter list to specify who is granted access than
>who is not.
>
>My web config file looks like this:
><?xml version="1.0" encoding="utf-8" ?>
><configuration>
>
>   <system.web>
>
>     <authorization>
>     <deny users="?" />
>     <allow users="99451" />
>     </authorization>
>
>   </system.web>
>
></configuration>
>
>However, this config is still allowing everyone in.  Can someone help me
>out on this?
>
>Thanks,
>
>Tim