Question

I added an ASP.NET application under a virtual directory in Default Web Site. When I change the Authentication settings for a subfolder in the application (such as by disabling Anonymous Authentication) I can’t find where the setting is being stored. There is no web.config being created in the subfolder, the application’s root web.config is untouched and Process Monitor doesn’t record any file writes either.

Answer 1

IIS Manager stores Authentication settings in “C:\Windows\System32\inetsrv\config\applicationHost.config” for any website or subfolder. The corresponding section needs to be copied out and into your local web.config.