Hej!
Du kan själv bestämma vilka filer som skall skyddas. Det ställer man in i Web.Config. Ett ex:
<configuration>
<!-- forms based authentication -->
<system.web>
<!-- enable Forms authentication -->
<authentication mode="Forms">
<forms name="Valfritt" loginUrl="login.aspx" protection="All" path="/" />
</authentication>
</system.web>
<!-- set secure paths -->
<location path="hemlig.aspx">
<system.web>
<authorization>
<deny users="?" />
</authorization>
</system.web>
</location>
</configuration>