ReCrystallize Server respects Windows file system permissions. It will display only those files to which a Windows user account has been granted access under the file’s Properties, Security tab in Windows Explorer.
If Anonymous Authentication is allowed, ReCrystallize Server cannot check file system permissions and will display all available files. To enforce file permissions, ensure that user authentication is required. You may require authentication for the entire website by disabling Anonymous Authentication for the website in IIS Manager.
If you wish to allow Anonymous Authentication in portions of your website, but not in ReCrystallize Server, edit the web.config file in the ReCrystallizeServer folder to remove the comment tags enclosing the following lines near the bottom of the file:
<!-- <authentication mode=”Windows” /> <authorization> <deny users=”?”/> </authorization> -->