Create and Use Session and Application Level Events in ASP.NET

This is couples of line from my one of the article about your query. Here it is: ******************************************************************* Almost we have done everything but still we are missing a major thing. If you run your project at this time will open the SecurePage.aspx without login also. But if you want to redirect the user for login and then with authentication can access the SecurePage.aspx we have to deny the access in SecurePage.aspx page or directly in particular directory. And also when user enters credentials then session variables remember it until user close his browser or click on logout button or link (generally we prefer to click on logout). So let's take a look to deny the access: ::::::::::: ::::::::::: <location path="securepage"> <system.web> <authorization> <deny users="?"/> </authorization> </system.web> </location> </configuration> And we also have to change the authentication mode to "Forms" like: :::::::::::::: <system.web> <authentication mode="Forms"> <forms loginUrl="Login.aspx" /> </authentication> <compilation debug="true"/> </system.web> :::::::::::::: ******************************************************** You can view this article here http://www.c-sharpcorner.com/UploadFile/abhikumarvatsa/1686/?ArticleID=11c2c322-e4ed-4aaa-acf4-8d376acc3c4a