<location   path= "~/file1/file2/"> 
        <system.web> 
            <authorization> 
            <deny   users= "? "/> 
            </authorization> 
        </system.web> 
    </location>