How does one specify root location in web.config to allow unauthenticated users access it?
The root location is served by default.aspx, but users normally don\'t see
To specify root directory you have to set it outside the location block.
and then secure your other folder using location block