IIS 7 authorization rules not synced with web.config

Question

Is there something wrong with my IIS setup? I have a 64-bit IIS 7.0 installation. My site has a web.config, with authorization rules specified.

In IIS Manager, when I open the authorization rules, I had expected the rules from the web.config to be displayed and be editable, with any changes I make synced back to the web.config. This does not seem to be the case.

From what I can tell, the site obeys whatever rules are put into the authorization settings in IIS, but completely ignores any rules that are put into the web.config.

Is this correct? How is this supposed to work? Is there some way to force a sync?

Answer 1

看来IIS将规则放入web.config的system.webserver部分。