I have been pulling my hair for a while trying to find the Authorization rules icon in IIS7. Not sure why this is missing from my application. This aint visible in any of my sites/application.
I manually added in the following section onto my web.config file, but the authorization rules simply doesnt work. I can still access text files/images in my application directory
when it should have a returned a 401 response.
<remove users="*" roles="" verbs="" />