Hello Everyone,

 I have one main web.config file and then I added another in a folder say secure. As anything within that folder I need it to be password protected.

<configuration>

</configuration>

 This is the error I get :

It is an error to use a section registered as allowDefinition='MachineToApplication' beyond application level.  This error can be caused by a virtual directory not being configured as an application in IIS.

Can anyone please let me know how to fix this ?

 You need to set up the new folder as an application folder. If local I believe you do this in ControlPanel_AdministrativeTools_Microsoft.NET Framework 2.0.

If on a hosted site there should be a way to set it in the Account management site.

What I was doing wrong was everything I was putting in the secondary web.config file.

The authentication part should be in main web.config and authorization part in secondary.