web.config problems

I would like to put all my "admin" pages such as user login, default (protected page, send password, change password in an admin folder off the root directory. But if I have use the following deny user

<system.web>
<authorization>
<deny users="?" />
</authorization>
</system.web
line in my web.config (which I place inside the admin folder)any link I have on a page to another admin page always defaults back to the login.aspx.

For example:

on my login.aspx page users should be able to click on the text "forgot password" or "change password" and be directed to the corresponding sendpassword.aspx or changepass.aspx pages within the admin folder. But when the text is clicked on it just diverts back to the login.aspx page.

What am I doing wrong?

many thanksHi,

this is because by default with thse settings only logon page is accessible for unauthenticated users.

You need to specify that those pages are accessible. Add following to web.config (outside <system.web> tags but inside <configuration>), for example:

<location path="sendpassword.aspx">
 <system.web>
 <authorization>
 <allow users="*" />
 </authorization>
 </system.web>
</location>

This allows all users to access the given page (sendpassword.aspx). Just repeat this for all pages (or if you have a folder where you could put all accessible pages, specify the folder name instead of single page so you don't have to type the same for all pages one by one).
thanks very much...it works very well now.