Microsoft says that
ASP.NET version 2.0 on Windows Server 2003 protects all files in a
given directory, even those not mapped to ASP.NET, such
as .html, .gif, and .jpg files.
I have a ASP.NET 2.0 webapp on a 2003 server with the following
Lets say that the app is on the following URL: www.myapp.com.
When I access www.myapp.com/default.aspx I will correctly be
redirected to the Login.aspx page.
But if I try www.myapp.com/pictures/mypicture.jpg the picture is
loaded without requiring login.
Same happens for html pages.
I have checked that the app is running under NET 2.0 in IIS.
I have tried to install on 3 different 2003 servers but with no
What am I doing wrong?
Hope you can help