Hi,

I have a subfolder that I want to secure thousdands of .pdfs in and only give access to those logged in.  To this end I tried the ASP.NET way and added in the deny="?" for the appropriate location path, as well as configuring IIS to pass .PDFs through asp.net.  The problem is that when a logged in user tries to access the pdf, they are asked to login with a popup (not the login screen), and no matter what I try I can't figure out which user name and password it is looking for (admin, host, Windows Auth..nothing is working).  Any ideas?  It might be important to note that this is in a child portal. 
I know that DNN now has "Secure" folders, but going through manually and uploadinging thousands, or reverse engineering the process and doing it programmatically seems like case scenario.

Thanks.

But this still won't keep someone from "guessing" the absolute address of those .PDFs and then being able to view them without being authenticated, will it?  Or a search engine indexing them?

Files in a "Secure File System" Folder are not delivered by the web server. technically, they get appended a .config suffix, preventing the option to download them using the url, those files can only be delivered using linkclick.aspx. which checks for DNN folder permission (to be specified in lower part of admin :: File Manager module).