IIS, denying access to static files; What is wrong with this example?

Question

I am trying to get the simplest example of allowing access by default, denying access unless authenticated to specific directories in IIS, to work. When you Google around, every

Answer 1

it doesn't like the path "~/pages" . The following works for me