Hi,
You can specify those pages which you dont want them to access, in your web.config file of the root directory where you specify the authentication mode=forms
to do that, put the following code in your web.config file
<location path="ProtectedPage.aspx">
<system.web>
<authorization>
<deny users="*" />
</authorization>
</system.web>
</location>
The above would deny any user to view that page.
If you want only specific user to view the page (ex. admin user) you can specify as follows:-
<location path="ProtectedPage.aspx">
<system.web>
<authorization>
<deny users="*" />
<allow users="admin" />
</authorization>
</system.web>
</location>
If you have lot of such pages you can put them in a folder and specify the folder name in the location path= tag, instead of the file name. Then all the files in those folders will be protected.
Hope it helps.
regards,
Harish
http://geekswithblogs.net/ranganh