You need to explicitly allow/disallow user/role access to sub/directories. eg.

	<location path="Admin">
		<system.web>
			<authorization>
				<allow roles="Administrators"/>
				<deny users="*"/>
			</authorization>
		</system.web>
	</location>

>Can anyone tell me why I see images on forms ... properly ... when the following code is not active in the web.config file ...
>

>		<authentication mode="Forms">
>			<forms name=".ASPXAUTH" loginUrl="login.aspx"/>
>		</authentication>
>		<authorization>
>			<deny users="?"/>
>		</authorization>
>
>

>
>but see the correct images when this information is commented out?
>
>I run the application using F5 in VS2005 in each instance.
>
>Thank you,
>
>CTB