How would I protect all my files from someone getting access to my
asp,htm,gif,jpg etc. files?

I can protect my .aspx files using Forms Authentication and dropping the
following in my specific folders.

<configuration>
  <system.web>
    <authorization>
      <deny users="?" />
      <deny users="tSmith" />
    </authorization>
  </system.web>
  <location path="default.aspx">
    <system.web>
      <authorization>
        <allow users="*" />
      </authorization>
    </system.web>
  </location>
  <location path="addLogin.aspx">
    <system.web>
      <authorization>
        <allow users="*" />
      </authorization>
    </system.web>
  </location>

But this only seems to work with aspx files

Thanks,

Tom

@TK2MSFTNGP09.phx.gbl:

In IIS, you need to map all document types to the ASP.NET ISAPI filter. I
think by default only ASP* file types are mapped to it.

named anchor
Embedding an image in the html?
File security weirdness createing file.
Server.Transfer Does Not Invoke IsPostBack in .NET Framework 1.1
Javascript to Set Focus to TextBox
Modification by JavaScript function won't stay, why?
Coordination of projects
.aspx / .ascx in Visual Studio 2005
javascript for checking user
Refresh page error