ASP.NET Forms Authentication and a "No Authentication" subfolder

Is it possible to disable all authenticati开发者_运维技巧on in a subfolder of a web site that is Forms Authenticated? How do you accomplish this?

Yes, place a web.config file on the subfolder with this content:

<configuration>
    <system.web>
      <authorization>
        <allow users="*"/>
      </authorization>
    </system.web>
</configuration>

yes you can, you can use location tag in the web.config to configure folder level security.