On my local machine, I work on multiple web sites and run them under IIS under a \"Default\" web site. That way I can access the sites through this type of URL: http://localhos
You need to enable Windows authentication at the application level in the Web.config, then further define authorization at the folder level, allowing all users at the root and denying all unauthenticated for the internal
folder.
In IIS, make sure both Anonymous Authentication and Windows Authentication are enabled for the application. Then, modify your Web.config as follows: