A: 

I think that your admin or console web application should always go into its own project. This way you can have more control if ever it is to be deployed to an intranet setting, if you need to hide certain functionality from your main site, etc. Co-mingling these two concerns under one site rarely ends up being a good idea as the site grows and grows. Also, an admin site rarely benefits from the design and so on of the main application. Administrative functions usually benefit from a more direct layout, additional screens, more security, etc.

Think about http://console.sitename.com/forum/index. This is much clearer and can still have ties to your forum application. The concerns are very much separated here.

Andrew Siemer
+1  A: 

The beauty of MVC is that your URL's don't tie to static resources like they do in ASP.NET Webforms. With that in mind, you can craft your Admin URL's to look however you like and point at whatever controller you like rather than creating some intricate directory structure. In the past, putting Administrative functions within a subfolder was beneficial because you could lock that folder down easily with configuration files, but that isn't needed now that Views are separate from URL's.

Typically I handle things by just configuring my Admin routes the way I'd like them and pointing them at an Administrative controller. The controller is then locked down to only users in an Administrative role using an Authorize decorator on the controller class. Then it's just a matter of making sure people are in the correct roles. My URL's are usually something to the effect of "Admin/ManageUsers." Maybe there are some shortcomings of this, but I haven't run into any issues thus far.

Bit Destroyer
A: 

I've done both alternatives Bit and Andrew present and i think in this case i've put the admin stuff in a separate Area or bundle the views together in an admin folder for better overview. On the other hand, Bit's alternative is very good when you reuse the views in both the forum and the admin site but with slightly different functionality depending on authorization rules.

magnus