登录的用户无效.Memership服务. asp.net

我有一个具有登录控件的默认页面,该页面位于主目录中.然后我有一堆页面,我只希望可以查看已登录“MemberPages”目录的人.我的问题是当我点击默认页面上的登录按钮,使用用户名并传递不在数据库中时,它仍然需要我所有的成员页面

我浏览了asp.net配置并设置了“MemberPages目录以拒绝所有非auth用户.但它仍然有从主要继承的褪色,允许所有并且无法更改(也许这是问题？但我不能删除它)还有什么？谢谢

这是来自MemberPages目录的web.config.

<?xml version="1.0" encoding="utf-8"?>
<configuration>
    <system.web>
        <authorization>
            <deny users="?" />
        </authorization>
    </system.web>
</configuration>

这是我的主要web.config.

<configuration>

  <connectionStrings>
    <add name="LoginSQL" providerName="System.Data.SqlClient"
         connectionString="Data Source=xx.xx.xx.xx;Initial Catalog=xxxx;UID=xxxxxxx ;pwd=xxxxx;"/>
  </connectionStrings>

  <system.web>
    <compilation debug="true" targetFramework="4.0"/>

    <authentication mode="Forms">
      <forms name="Login" loginUrl="Default.aspx" timeout="20" />
    </authentication>


    <membership>
      <providers>
        <add connectionStringName="LoginSQL" applicationName="Login"
          enablePasswordRetrieval="false" enablePasswordReset="true" requiresQuestionAndAnswer="true"
          requiresUniqueEmail="true" passwordFormat="Hashed" maxInvalidPasswordAttempts="3"
          passwordAttemptWindow="30" minRequiredPasswordLength="6" minRequiredNonalphanumericCharacters="0"
          name="MySqlLoginProvider" type="System.Web.Security.SqlMembershipProvider" />
      </providers>
    </membership>


    <profile>
      <providers>
        <clear/>
        <add name="AspNetSqlProfileProvider" type="System.Web.Profile.SqlProfileProvider" connectionStringName="ApplicationServices" applicationName="/"/>
      </providers>
    </profile>

    <roleManager cacheRolesInCookie="true" cookieName=".ASPRoles"
      cookieTimeout="60">
      <providers>
        <add connectionStringName="LoginSQL" applicationName="Login"
          name="MyRoleProvider" type="System.Web.Security.SqlRoleProvider" />
      </providers>
    </roleManager>

  </system.web>
  <system.webServer>
    <modules runAllManagedModulesForAllRequests="true"/>
  </system.webServer>
</configuration>

protected void btnLogin_Click(object sender,EventArgs e)
{
    if (Membership.ValidateUser(txtUserName.Text,txtPassword.Text))
    {
        FormsAuthentication.RedirectFromLoginPage(txtUserName.Text,true);
    }
    else
    {
        txtLoginFailedMsg.Text = "Login failed. Please check your user name and password and try again.";
    }
}