Form Based Authentication

Question

If I wanted to make sure that AUTHENTICATED users were denied access to Enroll.aspx users and UNAUTHENTICATED users had access, how should the “allow / deny users” tags in the web.config file be set?

<location path="Enroll.aspx">
    <system.web>
      <authorization>
        <allow users = "?" />
        <deny users = "?" />
      </authorization>
    </system.web>
</location>

Answer 1

<allow users="?" />
<deny users="*" />

Gotta do the trick

Answer 2

Have you tried this?

<authorization>
<allow users = "?" />
<deny users = "*" />
</authorization> 

Allow anonymous users to refuse all.