File: Web.Config <configuration> <system.web> <authentication mode="Forms" /> </system.web> <location path="SecretFiles"> <system.web> <authorization> <deny users="?"/> </authorization> </system.web> </location> </configuration>