Dot Net Questions on Web Config

There are two configuration file Web.config and Machine.config and these configurations files are XML-based text files and have named web.config that can appear in any directory of web application created in ASP.NET. Web.config configuration settings to all files and child directories of the application files and directories are located in all virtual directories and children below. Directory son have the right to cancel or modify the settings you specified in parent directories.

The configuration WinNTMicrosoft.NETFrameworkconfigmachine.config root file provides the default configuration for the entire machine and all applications under it. But one thing is that IIS can not configure the browser to directly access the web.config file to ensure that their values ​​can not become public, and the error shown is ASP.NET to return 403: Access Denied. The main function of the Explorer configuration file itself is being run in ASP.NET and ASP.NET uses these web.config configuration files to hierarchically compute a unique collection of settings for each incoming request URL destination. Some of the settings, which comes in Config file is just like the state of the session. Features session state may be added in web.config tag.We session state can also set the timeout policy there which is the default 20 minutes mainly there are four modes of sitting in the configuration file.

Off-Indicates that session state is enabled.

Inproc - Indicates that session state is stored locally.

StateServer: Indicates that session state is stored on a remote server.

SQLServer: Indicates that session state is stored on the SQL server.

And another section of the configuration file is the connection string or you can say that appSettings that's the great advantage of configuration files that we place our connection string that is helpful in securing our connection string on the part of 'user because this file can not be browse some other features also in the configuration file as well as Custom Error, Authorization, Authentication assembly reference .......