I have a forms-based authentication application on our intranet - ASP.NET 3.5 (C#).

For security purposes there is one specific .aspx file that we have enabled Integrated Windows Authentication turned on. Administrators in another group control access to this .aspx file via the file system. They have specifically set DENY access on this file to a few groups of employees.

If one of those employees somehow manages to...