Hi
I think it will help if you allow the anonymous user to access the pages (Login.aspx) in root path but restrict them access the pages in subfolder.
For example
<location path ="ManageSys">
<system.web>
<authorization>
<allow users="Admin"/>
<deny users="*"/>
</authorization>
</system.web>
</location>
<system.web>
<authorization>
<allow users="*"/>
</authorization>
</system.web>
</configuration>
Best Regards
XiaoYong Dai
Microsoft Online Community Support
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.