Forms based authentication

Question

If I wanted to make sure that AUTHENTICATED users were denied access to Enroll.aspx and UNAUTHENTICATED users had access how should my "allow/deny users" tags be set in the web.config?

<location path="Enroll.aspx">
    <system.web>
      <authorization>
        <allow users = "?" />
        <deny users = "?" />
      </authorization>
    </system.web>
</location>

Answer 1

Did you try this?

<authorization>
<allow users = "?" />
<deny users = "*" />
</authorization> 

Allow anonymous users, deny everyone else.

Answer 2

<allow users="?" />
<deny users="*" />

Should do the trick