Can I deny ASP.NET anonymous access to all files?

Question

My hypothetical website doesn't allow anonymous access and uses Forms Authentication. So the initial request for www.example.com/SomePage.aspx is redirected to www.example.com/Login.aspx?ReturnUrl=SomePage.aspx.

However users can still access URLs that aren't served by ASP.NET, e.g.: www.example.com/Images/AnImage.jpg or www.example.com/TextFile.txt.

Is it possible to deny anonymous access to these files and use the same Forms Authentication?

Answer 1

Yes - You must register ASP.NET for every file (.*) extension. this you have to configurate in ISS.

Answer 2

You can use IIS Extention Mapping. For More information click IIS Extention Mapping

Answer 3

There are some ways that will help you solve this problem : Permission under IIS