I created a website that uses the aspnet tables (aspnet_User, aspnet_Roles, UsersInRoles, application) to perform authentication. I've also enabled windows authentication. What I didn't realize I have to do is give user access to the website folder.
Can someone please provide a link that explains how the authentication works? Why does the user need access to the folder? Is that userid authenticated by IIS? If that's the case do I need to provide another authentication on the database level?